GhostPush
Send a password that destroys itself once it has been read.
Everybody pastes credentials into Teams and email, where they sit in a thread for years. GhostPush is the tool we built so our own clients would stop doing it. Anyone can use it.
Three things happen, in this order
Locked before it leaves
The browser generates a random key and encrypts the secret with it. Only the locked result is ever sent to the server. The plaintext does not cross the wire.
The key rides in the link
It sits in the part of the URL after the #, which browsers do not send to a server. It reaches the recipient without ever reaching us.
Then it stops existing
Once the last view is spent the record is deleted. If nobody opens it, it expires on its own. Either way it does not sit in a mail thread forever.
Why a consultancy ships its own software
We kept telling clients to stop emailing passwords without handing them anything better, so we built the better thing. It is also the plainest answer we have to the question of whether the people advising you can actually build. This is what that looks like when it is running in production.
- Encryption
- AES-256-GCM, in the browser, before anything is sent
- Keys on the server
- None. The key only ever lives in the link.
- Where it is stored
- Sydney, London or N. Virginia, on AWS. You pick.
- Price
- Free to send. No account needed to get started.
Tell us what is actually
going wrong.
No sales sequence and no discovery deck. Send through what you are working on, and someone from our team of certified professionals replies within a business day.
