Alternatives
Products that do what Sub Rosa does
An e2e secret sharing website with client-side encryption
- 1RS
Retriever (https://retriever.corgea.io/), an open-source research project to help users receive secrets and sensitive information without needing a server in the middle. It works by using Public-key cryptography to coordinate the message sharing between the two devices. Read more on why we built it here: https://retriever.corgea.io/why.html
2024 · retriever.corgea.io
- 2
- 3
- 4
- 5
- 6SA
Hi HN, We (myself, Adhyyan1252 and yush_g) are undergrad students that hacked out this side project last month during Hack Lodge[1] (the ideas and many of the underlying circuits for which came from the 0xPARC community[2])! We’re extremely excited to share this new primitive. Besides the technical challenges building this project that folks here would find interesting (fixing the ZK proof compiler, modifying nodeJS V8 params etc.), we think this is a very novel use case for ZK tech, and ECDSA inside ZK-SNARKs is a starting point that unlocks many other ideas! :D A summarized version of our…
2022 · github.com
- 7
- 8
- 9
- 10
- 11
- 12IC
2024 · webcrypto-private-messages.vercel.app
- 13SB
Stasher is a tiny CLI tool that lets you share encrypted secrets that burn after reading — no accounts, no logins, no servers to trust. I built it because I just wanted to share a password. Not spin up infra. Not register for some "secure" web app. Not trust Slack threads. Just send a secret. Secrets are encrypted client-side with AES-256-GCM. You get a `uuid:key` token to share. Once someone reads it, it's gone. If they don't read it in 10 minutes, it expires and deleted. Everything is verifiable. Every release is signed, SLSA-attested, SBOM-included, and logged in the Rekor transparency…
2025 · github.com
- 14CR
2023 · github.com
- 15HS
Hi HN! I built hidetext.sh — a way to share text, code, and files through links the server can't read. How it works: your browser generates a random key and encrypts everything locally (NaCl secretbox, XSalsa20-Poly1305). Only ciphertext is uploaded. The key goes into the URL fragment — the part after # — which browsers never send to servers. The link carries the key, my server stores the locked box, and the two only meet in a browser. A design detail I'm fairly happy with: burn-after-read doesn't destroy the paste on the first HTTP request. The naive version means a Slack or iMessage link…
Jul 2026 · hidetext.sh
- 16IP
Hey HN! I made a service to share passwords easy and secure but never promoted it. It's called instapass.io I noticed that people besides my friends and clients actually started to use, so maybe it will be helpful for you too! You share one-time self-destruct message using one time links and I won't even be able to see what you wrote. How does it work? When you generate a message the client-side makes a random password and use that to encrypt the message. The password is appended as an anchor tag which all modern browsers never send to the server. This way, I don't even know what you shared.…
2019
- 17
- 18DE
Jun 2026 · droplock.apitman.com
- 19ES
Jun 2026 · v1c.rocks
- 20SS
Hey HN, I've been playing around with OpenPGP.js and Soketi lately and decided to build a simple E2E encrypted messaging app. It's called subtle.sh. The idea is pretty straightforward: you need to send a secret to someone, but you don't want to use Slack, email, or any other plain text medium. subtle.sh generates a fresh session with ephemeral keys, you share the link, and once the tab is closed, everything disappears. Some key points: - Zero setup required (no accounts, no installation) - E2E encryption using OpenPGP.js - Real-time messaging with Soketi (an open-source Pusher alternative) -…
2024 · subtle.sh
- 21
- 22ET
So, you want to avoid mass surveillance and don't trust big tech companies either? But you're tied to your existing network of contacts like everyone else? Well now you can send encrypted messages to your contacts over the Twitter direct messaging channel. It's a serverless SPA called Seecret, a Twitter client hosted at https://www.seecret.io Seecret is open source and freely distributable. You can host it anywhere even from your own localhost server. The app is just plain html and javascript, with no server-side processing at all, no tracking, no logging. Steps: 1-Grant Seecret.io…
2016
- 23
- 24
Ranked by how close each launch is in meaning, then by votes. Refine with a description →