SECURITY • UPDATES3/16/2026•5 min read
How Our Client-Side Encryption Works
A detailed technical breakdown of how we use the WebCrypto API to ensure your data is encrypted before it ever leaves your browser.
At BURNBIN, we believe in true privacy. When you type a message and click "Encrypt & Generate Link", the magic happens entirely within your browser.
We use the WebCrypto API to generate a strong AES-GCM 256-bit key locally. The plaintext is encrypted instantly, and only the scrambled ciphertext is sent to our servers.
The decryption key is embedded directly into the URL hash fragment #key. Because browsers explicitly do not send hash fragments to servers, our backend never sees your key. We couldn't read your secrets even if we wanted to.