zahki-ghost
v1.0.0
Published
Burn-after-read encrypted notes. Zero-knowledge — encryption key never leaves the client.
Maintainers
Readme
zahki-ghost
Self-destructing encrypted notes.
Write a note, get a link, the note deletes itself after it's read. Encryption happens in your browser — the server only stores encrypted data it can't read.
https://zahkighost.alkhabaz.dev
How it works
- You write a note
- Browser encrypts it (AES-256-GCM)
- Encrypted blob goes to the server
- You get a link — the decryption key is in the
#fragment, which browsers don't send to servers - Recipient opens the link, their browser decrypts it
- Note is deleted
Optional password protection adds PBKDF2 on top — even with the link, you need the password.
Run it
git clone https://github.com/Ialkyyyy/zahki-ghost.git
cd zahki-ghost
npm install
npm run devStack
React, Express, sql.js, Web Crypto API
License
MIT
