CryptYak

I can't see you.

// how_it_works

How CryptYak Works

The plain-English explainer.

What CryptYak Is

last updated 2026-11-01

CryptYak is a small, free tool for moving something private between your own devices, or to a friend, without trusting anyone in the middle.

Clipvault is a short-lived tape of text and files shared by your devices. Type the same five characters on your laptop and your phone and both see the same tape. Any single item can be sealed into a one-shot link for someone else.

Chat is a private room for two people, straight between your devices: messages and files, voice and video calls, and screen sharing.

Your browser does the encrypting, so what reaches me is gibberish I can’t read. No accounts, no analytics, no third-party JavaScript.

Over Tor. CryptYak can also be reached as an onion site, so I don’t learn where you connect from. Tor Browser offers it with a “.onion available” button. Clipvault works there at the Standard security level (the stricter levels switch off something it needs, and the page says so). Chat doesn’t: Tor Browser turns off the direct connections between devices that chat relies on.

Clipvault

last updated 2026-11-01

Start a tape on one device, type its five-character code on another, and both are looking at the same list of text and files. Add something on either and it appears on the other a moment later. Any device with the code can add or remove items. A tape left open keeps up by itself: new and edited items show up without a refresh, even after a sleep or a dropped connection.

What happens when you add something

Your browser encrypts each item, name included, before it leaves your device. I store the scrambled result and hand it back only to a device that knows the code. Anything missing or altered is refused rather than shown. Big files can go straight between two of your devices that have the tape open, encrypted the same way.

Tick wipe metadata and photos lose their hidden details (where they were taken, the camera, the date) in your browser before they’re encrypted. The picture itself isn’t touched. A photo it can’t clean is held back and you’re told; other files go as they are.

Reading and formatting text

Tap a text to read or edit it. Lines like ::yak md, ::yak code or ::yak secret change how it’s shown; a secret stays hidden until you tap reveal.

Links open a stop page first that shows the real site name and waits for your click. The site isn’t told you came from CryptYak.

Stirring (optional)

Press stir and move your pointer, fingers or keys over the field. Your input gets mixed into the keys of tapes and items you create afterwards in that tab, so they are at least as unpredictable as the better of your input and your browser’s own randomness. Nothing you stir is sent or saved. It doesn’t change the five-character code or chat.

Why five characters is enough

A short code is easy to type on a phone, so the protection comes from making guessing slow and limited, and from tapes not living long. Treat a code like a hotel safe combination: handy and temporary, not for your deepest secrets.

How long a tape lives

A day after anyone last used it, and never more than three days in total. Then it and everything on it are deleted.

The Encrypted Chat

last updated 2026-11-01

Start a room, share its five-character code or link with one person, and your two browsers connect directly. A room has two seats, so nobody else gets in. When your networks can’t reach each other, my relay passes the traffic along, still encrypted. Drop out for a moment or switch networks and your page picks up where it left off.

How it’s protected

Everything is encrypted with a key only your two browsers know. The code is just a meeting point, never a key. I keep nothing: no transcript, no files.

Photos can carry where they were taken. Tick wipe metadata under the message box and your browser strips that, the camera and the date before sending; the same switch works in Clipvault.

Safety words

My server introduces your two browsers, so in theory I could swap the keys between you. To rule that out, press the shield button beside the room code and read the five safety words to each other by phone or in person. If they differ, the connection closes.

If the connection drops and comes back, your two pages prove to each other that they are still the same two, so you aren't asked again (when both pages are up to date). After a reload, or if someone new takes the seat, you are.

Video calls

Press call. Nothing starts until the other person accepts, and you each choose whether to join with mic, camera, both or neither. Picture and sound go straight between your browsers.

Tap your own small picture to swap it with theirs and see yourself big. Then pinch, or scroll while holding ctrl on a computer, to zoom in: your friend sees the zoomed picture, so you can show them something up close. Double tap to zoom back out.

Mute, turn your camera off or share your screen whenever you like. Start with one window and switch to another, or to your whole screen, without stopping. While you share, you can let your friend point at your screen: their taps show up as a ping for you, and they can never click or type on your computer. Pinch to zoom in on a screen someone shares with you.

When a call ends, the last picture breaks into glowing pixels and boils away to a single dot, then no carrier and the length of the call. It is only a show on your own screen, made from a snapshot that never leaves your tab.

Calls ring only while the tab is open. I don’t route alerts through Apple or Google.

Video call invites

Waiting for someone? Tick video call and the link you share is a call invite. Whoever opens it gets a few easy steps: pick mic and camera, try them, then ring you. A guise is there too, folded away until they open it. They can skip to plain chat at any step.

You see how far they’ve got, and once they’re ready whether they’re coming with camera and mic on. Their picture stays with them until you answer, and you still answer the ring yourself. The link marks itself as a call invite, which my server can see. Nothing more.

Guise

Want to be seen and heard a little less? Pick a guise, a face and a voice, before a call or during one. It all happens on your own device, so your friend only ever gets the disguised version.

Each face has a level. Turn it down and the blocks, dots or letters get finer, so your friend sees more of you; turn it up and they get coarser, hiding more. You can change it mid-call and the picture follows at once.

What it isn’t

Not a group chat, and not a place that remembers: refresh and the messages are gone.

Honest Limits

last updated 2026-10-15

CryptYak protects your data on its way between devices. It can’t protect what happens on the devices themselves.

What I can see

  • Your Clipvault code when a device opens a tape. I don’t keep it, but whoever controls the running server could. That’s the price of a short code; for anything more sensitive, use a sealed link.
  • Sizes and timing, never contents.
  • That a call is happening, if it goes through the relay.
  • Network addresses. In a chat or a direct transfer, the two devices learn each other’s.

Short codes can be guessed

Guessing is limited, so a stranger’s odds are tiny, but not zero. Someone who guessed a chat code first would take the second seat, and your friend would find the room full. The safety words catch anyone in the middle.

What no tool can fix

  • Malware on your device or your peer’s.
  • Someone who can see your screen or use your unlocked device.
  • The person you give a code or link to. You’re trusting them.
  • Software that watches your input can see a stir.
  • A call guise isn’t anonymity. Someone who recorded you could undo a pitch change, and your words and way of speaking stay yours. A face turned down to its lowest level can be recognisable.

What I promise

No selling or sharing of what little I see, no analytics, no third-party scripts.

no accounts · no analytics · zero-knowledge server · p2p chat · how it works