Whisper Decrypt

Decrypt whisper.beer notes locally in the popup. Decrypt code ships inside this signed package, not fetched from any server.

Whisper Decrypt is the companion browser extension for whisper.beer — anonymous, self-destructing, end-to-end-encryptable notes and files. WHAT IT DOES Paste the link you were given, and the extension fetches the note's raw ciphertext and decrypts it right here in the popup with your browser's built-in WebCrypto. It never asks the server to decrypt anything for you. WHY AN EXTENSION, NOT JUST THE WEBSITE The decryption code ships inside this signed, reviewed package. It is never downloaded from a server at the moment you use it, so there's nothing for a compromised or malicious server to swap out from under you. Chrome Web Store's policy for extensions actually enforces this: no remotely hosted code is allowed in the package you're installing right now. WHAT NEVER LEAVES YOUR DEVICE Your note's decryption key and password are used only locally — for AES-256 notes, they're never sent anywhere; only the note's ID is. (The one documented exception: a "true end-to-end" note's password is verified by the server itself, since in that mode the server holds no key to check a derived value against — the encryption key is still never sent.) WHAT IT SUPPORTS - Standard whisper notes (text and files), with or without a password - "True end-to-end" notes (the site's own optional stronger mode) - Self-hosted whisper-backend instances — paste any compatible link WHAT IT DOESN'T DO - No account, no sign-in, no tracking, no analytics - Doesn't create notes (yet) — read/decrypt only - Can't decrypt a note that used a custom, non-whisper client-side encryption scheme — there's no way to guess an arbitrary format safely, so it says so instead of guessing OPEN SOURCE Source, build instructions, and the exact crypto implementation are public: https://github.com/incatswetrust/whisper-extension