CipherSpace
Decentralized social network. Your private key = your identity. No servers, no signups, no surveillance.
Login
New Account
Username
Password
— or restore from backup —
Paste Backup JSON
Account Password
?
Timeline
Conversations
No messages yet.
Say hello!
Say hello!
?
—
@—
0
Posts
Local
Storage
E2EE
Encrypted
Your Posts
Edit Profile
Display Name
Bio
Privacy Mode
Public Account
Anyone can see your posts and DM you
Public: Feed terlihat oleh semua orang. Siapapun bisa DM kamu langsung.
Private: Feed terbatas. DM hanya bisa dimulai oleh orang yang tahu Public Key kamu.
Private: Feed terbatas. DM hanya bisa dimulai oleh orang yang tahu Public Key kamu.
Encryption Public Key
Share this key with anyone who wants to send you an encrypted DM.
Tap to copy
Key Management
Backup your encrypted key or view your recovery phrase. Keep these safe — they are the only way to restore your account.
Account Expiry
Set how long your account stays active. When it expires, all your data will be permanently deleted — posts, messages, and keys. This cannot be undone.
Current Status
—
Set Expiry Duration
Nostr Relay (optional)
WebSocket URL
Privacy Status
✓
Strong Key Derivation
PBKDF2 310,000 iterations + AES-256-GCM. Every password guess requires hundreds of thousands of calculations — brute-force is impractical.
✓
Timestamps Obfuscated
Post times are rounded to 10 minutes. No one can tell the exact time you were active, even by inspecting localStorage.
✓
Encrypted Local Storage
Posts and messages are stored encrypted in localStorage. Anyone accessing device storage only sees ciphertext.
✓
Zero Server
All data lives only on your device. No accounts, no server logins, nothing that can be requested by third parties.
Account Mode: Public
Feed visible to everyone. Change it in the Privacy Mode section above.
✓
DM End-to-End Encrypted
Direct messages encrypted with ECDH + AES-GCM. Only sender and recipient can read them.
About
E2EE via Web Crypto API (built-in browser)
Data stored in localStorage (your device only)
Nostr relay for cross-device sync (optional)
Zero external libraries loaded
No servers. No tracking. Your keys = your identity.