Encrypted Ephemeral Chat

Create temporary, end-to-end encrypted, self-destructing chat rooms.

Miscellaneous Utilities
Cybersecurity
Free

End-to-end encryptedAES-256-GCM, key derived in your browser
Password never sentThe server only receives an access proof
Self-destructRoom and messages erased after 30 min to 24 h
No accountA nickname is enough, no email address

New encrypted room

Pick a name, a strong password and a lifetime.

Active public rooms

Rooms whose creator chose to list them. The password is still required.

How it works

Your browser derives two separate values from the password: an encryption key and an access proof.
Every message is encrypted locally (AES-256-GCM) before sending; the server only stores ciphertext.
When the room expires or is deleted, the room and all its messages are permanently erased.

Without the password nobody (not even ForenShield) can read the messages: it cannot be recovered.

About

Encrypted Ephemeral Chat

Create a password-protected chat room in seconds, without an account. Your browser derives the encryption key from the password: messages and nicknames are encrypted before sending, and the server never sees the password or any plaintext. The room and its messages are erased when it expires. Handy for quick coordination during a security incident.

What it does

End-to-end AES-256-GCM encryption, key derived locally (PBKDF2-SHA256, 600,000 iterations)
Password never sent: the server only receives an access proof
Expiry of your choice from 30 minutes to 24 hours, manual deletion for everyone
Real time: participants, typing indicator, encrypted history for latecomers
Invite link, verification code, Markdown, conversation export

Frequently asked questions

How are messages protected?

Your browser derives an AES-256-GCM key from the room password (PBKDF2-SHA256, 600,000 iterations) that never leaves your device. Every message and nickname is encrypted before sending; the server only stores ciphertext and a hash of the access proof. Neither ForenShield nor anyone else can read the conversation without the password.

Are messages kept?

Only for the room's lifetime, encrypted, so that late participants can see the conversation. They are erased with the room when it expires (30 minutes to 24 hours, your choice) or as soon as a participant deletes it. No history can be recovered afterwards.

How do I invite participants?

After creating the room, copy the invite link (it only contains the room ID) and share the password through a different channel. Every participant sees the same verification code: compare it out loud to make sure nobody is using a different password.