Confidence is built so we can't read your messages. Here is what that means, and what it doesn't.
The message is erased as soon as it has been opened.
Never opened, it erases itself.
Eight wrong passwords, and it's gone.
The content goes black as soon as the page loses focus. But no website can stop a system screenshot, or another phone filming.
If your device, or your recipient's, is compromised, whatever shows on it can be seen.
Your account exists and the server sees connections. Confidence protects the content, not the fact that you sent something.
A password that's too simple, or sent with the link, doesn't protect much. Give it separately.
If the law asks us for information, we give what we have: what's listed above, never the content.
Encryption runs in the code our site sends to your browser. On that point, you have to trust us.
AES-256-GCM, in 4 MB pieces. The position of each piece is authenticated: they can't be reordered or removed.
PBKDF2-SHA256, 310,000 rounds, with a random salt. Half of the result is the key. The other half is a proof, and the server only keeps its SHA-256 fingerprint.
It's encrypted with the rest. The link only holds a random code, and the server only keeps its fingerprint.
Confidence