CipherSpace
Decentralized social network. Your private key = your identity. No servers, no signups, no surveillance.
Login
New Account
Username
Password
— or restore from backup —
Paste Backup JSON
Account Password
?
Timeline
Conversations
No messages yet.
Say hello!
Say hello!
?
—
@—
0
Posts
Local
Storage
E2EE
Encrypted
Your Posts
Edit Profile
Display Name
Bio
Privacy Mode
Public Account
Anyone can see your posts and DM you
Public: Your feed is visible to everyone. Anyone can DM you directly.
Private: Your feed is restricted. DMs can only be started by people who have your Public Key.
Private: Your feed is restricted. DMs can only be started by people who have your Public Key.
Encryption Public Key
Share this key with anyone who wants to send you an encrypted DM.
Tap to copy
Key Management
Backup your encrypted key or view your recovery phrase. Keep these safe — they are the only way to restore your account.
Account Expiry
Set how long your account stays active. When it expires, all your data will be permanently deleted — posts, messages, and keys. This cannot be undone.
Current Status
—
Set Expiry Duration
Privacy Status
✓
Strong Key Derivation
PBKDF2 310,000 iterations + AES-256-GCM. Every password guess requires hundreds of thousands of calculations — brute-force is impractical.
✓
Timestamps Obfuscated
Post times are rounded to 10 minutes. No one can tell the exact time you were active, even by inspecting localStorage.
✓
Encrypted Local Storage
Posts and messages are stored encrypted in localStorage. Anyone accessing device storage only sees ciphertext.
✓
Zero Server
All data lives only on your device. No accounts, no server logins, nothing that can be requested by third parties.
Account Mode: Public
Feed visible to everyone. Change it in the Privacy Mode section above.
✓
DM End-to-End Encrypted
Direct messages encrypted with ECDH + AES-GCM. Only sender and recipient can read them.
Danger Zone
Delete Account
Permanently delete your account. All posts, messages, and profile will be removed from the server and this device. This action cannot be undone.
About
E2EE via Web Crypto API (built-in browser)
Data stored in localStorage (your device only)
Zero external libraries loaded
No servers. No tracking. Your keys = your identity.