The toolkit.

Every browser tool below is free. No account. No tracking. No upload. Your data is encrypted on your machine and never touches a server. Pick one based on what you're protecting and how you'd lose it.

↓

Encrypt & Decrypt Anything

The general-purpose deniable encryption tool. Type or upload anything, set two passwords, get one ciphertext plus two control files: one revealing your real message, one revealing a decoy. Decrypt mode is built into the same page. Optional live realism engine generates shape-correct decoys (API keys, IBANs, JWTs, seed phrases) tailored to your real input. This is the engine the rest of the toolkit is built on.

Free · No account needed

// the realism engine

Decoys you couldn't write yourself.

Every other deniability tool ships fingerprintable static decoys. Ours don't. The realism engine generates shape-correct decoys across seventeen credential types on demand, runs every candidate through a deterministic validator, and returns only what passes. The engine sees the type. It never sees your real secret.

17 credential types

5 deterministic validators

2 modes: bundle & live

MIT licensed engine

OpenAI key

sk-proj-1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r9s0t…

BIP39 phrase

include error famous fantasy parade mountain spatial void stumble loyal shop segment

IBAN

FR47 3915 7204 8629 1048 57

Postgres URI

postgres://admin:x7kQ9mP2rL4vW8nJ@db-prod-01.acme-internal.net:5432/maindb

JWT

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzQ1NiIsImlhdCI6MTcxNTAwMDAwMH0…

Credit card

4532 1872 3456 7891

Click the refresh icon on any card to generate a fresh decoy from the live engine.

openai-key anthropic-key stripe-live-key stripe-test-key github-pat-classic github-pat-fine resend-key aws-access-key bip39-phrase jwt-token iban credit-card private-key-pem postgres-uri mongodb-uri generic freeform-secret

Validators include Luhn (credit cards), mod-97 (IBANs), BIP39 checksum, JWT structural, and PEM tag. Examples above are real engine output, regenerable on click. Read the architecture.

Try the live engine

Protect

Seed Phrase Protector

BIP-39-aware deniable backup for your wallet. Encrypts your real seed alongside a decoy. When the backup leaks, the decoy decrypts to a dust wallet and the bytes don't betray your real holdings.

Free

Secret Photos

Hide an encrypted message or file inside an ordinary photo. The image looks identical and the data is statistically indistinguishable from natural pixel noise. Nothing on disk advertises that anything is hidden.

Free

Restore Backup

Recover a real message or seed phrase from a deny.sh backup. Drop in your ciphertext plus the correct control file and password. Pairs with the Seed Phrase Protector and Encrypt Anything tools.

Free

Encrypted Vault

Cloud-synced storage for control files, passwords, and small secrets. Encrypted in your browser before upload, so we only ever see ciphertext. Decoy mode for pre-positioned plausible alternatives.

Free tier

Secret Splitting

Shamir's Secret Sharing in the browser. Break a secret into N pieces, choose how many (M) are needed to put it back together. Below that threshold, the partial pieces reveal nothing. Not just hard to crack, mathematically impossible.

Free

Automate

Dead Man's Switch

Stop checking in and your encrypted control file releases to people you choose. Configurable schedule, grace periods, encrypted email delivery. Recipients don't know the switch exists until it triggers.

Free tier

Inheritance

What happens to your crypto when you die? Set up Shamir-split keys, beneficiaries, and automatic release on a check-in timer. No lawyers, no probate, no seed phrase in a will.

API

Extend