Nulkratos is a browser-based messenger where the server is completely blind to your messages. Every message is encrypted with AES-256-GCM in your browser before leaving your device. The server stores only ciphertext — meaningless without your PIN. • Argon2id key derivation (64MB memory) • HKDF ratchet for forward secrecy • Usernames stored as SHA-256 hashes • No phone number, no email, no tracking • 100% open source
Hey Product Hunt! 👋
I built Nulkratos because I got tired of apps that say "encrypted" but still know who you talk to, when, and how often.
The architecture is zero-knowledge by design — not as a marketing claim. I literally cannot read your messages even if I wanted to. The encryption runs entirely in your browser via WebCrypto API before anything reaches the server.
Would love feedback from anyone who wants to poke at the security implementation. Ask me anything about how it works under the hood.
Report
No reviews yetBe the first to leave a review for Nulkratos