GhostLayer

End to end encrypt messages in any web chat. Your keys never leave your device. No accounts, no servers.

#GhostLayer adds end-to-end encryption to chat platforms that do not have it. Type a message, click Encrypt, pick a friend. Your text is replaced with a ciphertext blob before it leaves your browser. Your friend clicks Decrypt and reads it. The platform only ever sees the blob. Keys are generated on your machine and never leave it. There is no GhostLayer account, no GhostLayer server, and nothing to sign up for. The extension makes no network requests at all. HOW IT WORKS Create an identity in the popup. Share your invite key with a friend over any channel. Add their invite key to your friend list. From then on you can encrypt to each other on any site with a message box. Decryption is never automatic. A Decrypt button appears next to encrypted messages and you choose what to reveal and when. CRYPTOGRAPHY X25519 key agreement and ChaCha20-Poly1305 authenticated encryption, implemented in Rust and compiled to WebAssembly. TESTED ON Discord, Slack, X, and Messenger. Other sites with a message box may work. IMPORTANT LIMITATIONS GhostLayer is alpha software and has not been independently audited. 1. A recipient can forge messages that look like they came from you 2. Long lived, unencrypted private keys, so no forward secrecy 3. Who is talking to whom is not hidden 4. You can lose access to your own sent messages 5. Nothing is configurable 6. The protocol and the platform support are both early Each one is explained here, and you should read it before using GhostLayer for anything that matters: https://github.com/thecybro/GhostLayer/blob/main/LIMITATIONS.md OPEN SOURCE AGPL-3.0. Source at https://github.com/thecybro/GhostLayer