Secure Send

Securely send passwords or sensitive data

get it
There are no images or videos added to the gallery.
Add to gallery



You need to become a Contributor to join the discussion - Find out how.
Leo Ji
Leo Ji@theleoji · Blogger, student journalist.
How does this work? I'm concerned about the design of this solution, given that it's privy to passwords and things that need to be treated far more securely than normal messages. Are the messages stored on a server and later retrieved by the recipient? How does the encryption work? How do you ensure that third-parties can't access the information? Can server admins access the messages sent?
Karl Hills
Karl HillsMaker@karlhills · Director Of Operations
@theleoji We are addressing these issues through the separation of duties. Where no one person has access to the data and the associated encryption keys. We are also looking into some other options for people that might want to use a different workflow and their own key pair.
Eric Willis
Eric WillisHunter@erictwillis · Working on something new
App uses two-factor authentication to make sure that the intended recipient is the only one who can read the message.
Jon Callahan
Jon Callahan@jondcallahan · Web Developer
Securely send what now? ;)
Ben Tossell@bentossell · Services for startups
@jondcallahan haha what do you mean ;)
Karl Hills
Karl HillsMaker@karlhills · Director Of Operations
@jondcallahan the problem we're trying to solve is sending something sensitive to a co-worker, family, or friends. For me this recently arose when I wanted to send my mom a password that I'd set for her cable account. I didn't want to just email it to her and doing it over the phone was difficult because it was a fairly complex password. Any feedback is appreciated. Our goal is to build something that's useful and integrates well with how we all work these days.
jeremy carson
jeremy carson@thejeremycarson · Data-Driven Creative
@jondcallahan I think I'm seeing what you are. the home feed shows "passwords" but without the "p"
Jon Callahan
Jon Callahan@jondcallahan · Web Developer
@thejeremycarson @karlhills @bentossell Looks like the typo has been fixed now hahah
Karl Hills
Karl HillsMaker@karlhills · Director Of Operations
@jondcallahan That would be a totally different product :)
Jamie Martin
Jamie Martin@livejamie · Senior UX/UI at Echtra Games
Been pretty happy with Dashlane for this purpose. Why is this better?
Karl Hills
Karl HillsMaker@karlhills · Director Of Operations
@livejamie I've run into some cases that require me to send data that isn't necessarily a username/password scenario. That's the most common situation, but other use cases might be less login related and more sensitive in a personal way. I can also see the need to send a document to someone in a secure fashion, which is something we've been thinking about for this service.
Seb Kreutzberger
Seb Kreutzberger@skreutzb · SwiftyBeaver, Founder & CEO
I was thinking about building such a product by myself for years because it eases a big pain that especially businesses have when they need to send passwords to their employees. In my early concepts I always struggled with the issue that the user can not trust the sending service to secure the message and to really destroy it as promised. My solution would have been client-side encryption and maybe an open source client or server. In the end I always went with sending the first part of a password over Slack DM and the second part as email through Gmail because I trust the security teams at Google and Slack more than the security team of a very small startup and distributing a split secret over different channels makes things more secure. But maybe I misunderstood your concept and you solved the trust issue. You not being able to see the unencrypted secret is the key and I think no one solved it, yet.
Iliya Garakh
Iliya Garakh@beentech · CEO / CTO at Passwork
Karl Hills
Karl HillsMaker@karlhills · Director Of Operations
@skreutzb I agree that one of the major hurdles is trust. Another hurdle is making it easy to use for non-technical individuals that might not understand asymmetric keys, which would be something many technical users would be comfortable using.