throwaway is an in-browser messaging app. It’s specifically for single-use, one-to-one, e2e encrypted messaging. Your messages are encrypted in your browser, and only decrypted when they reach your recipients browser. You can never recover a throwaway chat.

Hi Makers & Hunters! I believe privacy is an important piece of democracy and we should all have the right to anonymity. With the EARN IT act in the US, and proposals to ban end-to-end (e2e) encryption in the UK, privacy/encryption is more important than ever. Throwaway is my contribution to the cause. What is throwaway? throwaway is an in-browser messaging app. It’s specifically for single-use, one-to-one, e2e encrypted messaging. This means your messages are encrypted in your browser, and they are only decrypted when they reach your recipients browser. The messages disappear permanently once both browser windows have closed. You can never recover a throwaway chat; once the window is closed, it’s gone forever. How does it work? throwaway uses the SubtleCrypto Web API to create a public-private key pair every time it is opened/refreshed (ECDH P-521). You can invite a recipient to start a chat using the invite link; automatically generated when you land on the page. Once a recipient has clicked on the invite link, throwaway generates them a key pair too. The public keys are shared so each user can derive symmetric keys (AES-GCM 256, forward secrecy) to encrypt messages that can only be decrypted by their recipients symmetric key. The private keys and derived symmetric keys never leave the browser window they were created in. I'd love to hear your thoughts, thanks!

I like the intention behind this. Great product, Keith!

@j_sagar Thank you, privacy is a huge motivator for me!

Didn't work for my use case. The other end receives an error indicating that the invitation expired even though they clicked on the link <30 seconds of sending the invite URL

@paulmirano Thanks for your feedback. As the invite links are single-use, we sometimes have issues where an app performs a link preview and "uses the single-use". This obviously shouldn't be the case and we deployed a fix within the last hour for Skype and MSN previews. If you used Skype or MSN to share your invite link then that will now work. If you didn't, please let me know (if you don't mind) how you shared the invite link and we'll get it fixed! Thanks again!

Totally makes sense! Will let you know of further issues arise. Congrats on the launch 🚀