FREQUENTLY ASKED QUESTIONS

▸ What's a cipher?

A cipher is a method of encoding information to keep it secret. In cryptography, ciphers transform readable text (plaintext) into unreadable text (ciphertext) using mathematical algorithms and keys. CipherDrop uses modern encryption ciphers to protect your messages before they leave your browser.

▸ How secure is CipherDrop really?

▸ Can CipherDrop read my messages?

No, absolutely not. CipherDrop uses client-side encryption mechanisms where messages are encrypted in your browser before being sent to our servers. The decryption key is contained in the link fragment (the part after '#') and never reaches our servers. Even if we wanted to read your messages, we technically cannot.

▸ What happens if I lose the link?

The message becomes permanently inaccessible. Since the decryption key is embedded in the link and we don't store it separately, losing the link means the encrypted message cannot be decrypted by anyone - including us. This is by design for maximum security.

▸ Are there any security limitations I should know about?

▸ Why cipherdrop.app and not .com?

▸ How do I know this is the real CipherDrop site?

▸ Are there any fake CipherDrop sites?

Be extremely cautious of imposters. Only use https://cipherdrop.app. Any other domain is unauthorized and potentially malicious. Fake sites might steal your messages or compromise your security. Always double-check the URL before creating or accessing messages.

▸ What's the character limit for messages?

Messages are limited to 5,000 characters. This includes all text, markdown formatting, and line breaks. The character count is displayed in real-time as you type, and the interface prevents you from exceeding this limit.

▸ How long do messages last?

▸ Can I edit a message after creating it?

No, messages cannot be edited after creation. This is a security feature - once a message is encrypted and stored, it becomes immutable. If you need to make changes, you'll need to create a new message and securely share the new link.

▸ What is markdown and can I use it?

▸ Can I password-protect messages?

Certainly. We encourage it. You can add an optional password for extra security. The recipient will need both the link AND the password to decrypt the message. Share the password through a different, secure channel than the link for maximum security.

▸ What's "Cipher Status Updates" and should I keep it enabled?

This is unique to CipherDrop. It treats your secure cipher link as an active object and let's you know if, and when, it was accessed. Since the cipher is deleted the moment it is decrypted by the recipient, you also see a timestamp of that that decryption time. If by chance you are on the status page the same time your recipient starts viewing the message, you will see a live countdown of how long they have to view the message in their browser (just in case you forgot). This is all done anonymously without any identifiable information. Just cool tech.

▸ Do you track users?

No user tracking. CipherDrop requires no accounts, stores no personal information, and doesn't use tracking cookies. We use temporary, cryptographically hashed IP addresses solely for rate limiting and security monitoring - never for tracking individual users.

▸ What data do you store?

▸ Can messages be recovered after deletion?

▸ Do you sell data or show ads?

Never. CipherDrop doesn't display advertisements or sell user data - we don't even collect data that would be valuable to sell. Our secure architecture means we literally cannot monetize user content or behavior. The service operates on a voluntary donation model for sustainability.

▸ My message won't load - what should I try?

▸ The link doesn't work - what are common issues?

▸ Can I use CipherDrop on mobile?

Yes. CipherDrop works on all modern devices - smartphones, tablets, and desktops. The interface adapts to your screen size, and all security features work identically across platforms. No app installation required - it works directly in your browser.

▸ Which browsers are supported?

▸ Is CipherDrop free to use?

Yes, completely free! CipherDrop operates on a voluntary donation model to cover infrastructure costs. There are no premium tiers, usage limits beyond reasonable rate limiting, or hidden fees. Donations help keep the service running and secure for everyone.

▸ Can I use CipherDrop for business communications?

While CipherDrop provides strong security, evaluate if it meets your specific business requirements. Consider factors like compliance needs, audit trails, integration requirements, and organizational policies.

▸ Will you add more features in the future?

We carefully consider new features that enhance security and usability without compromising our core privacy principles. Current development focuses on improving the markdown formatting experience (image uploads, etc.) and maintaining robust security. All new features must pass strict privacy and security reviews.