How Tathastu protects your data
Everything about how we handle encryption, passphrase management, and message delivery.
Recovery options
You choose how your passphrase is managed. Both options keep your messages fully encrypted.
You can switch anytime. Both methods keep your messages encrypted. The only difference is how the passphrase is managed. Change it from your settings whenever you want.
Under the hood
For those who want to know exactly what's running.
Encryption
AES-GCM-256 authenticated encryption with a random 12-byte IV per message. All encryption and decryption happens client-side in your browser using the Web Crypto API. We store ciphertext. We never see plaintext.
Key Derivation
PBKDF2-SHA256 with 100,000 iterations turns your passphrase into a cryptographic key. Each user gets a unique 16-byte salt. This makes brute-force and rainbow table attacks impractical.
Passphrase Escrow
Optional threshold encryption splits the recovery key between a Founder key and an Operator key. Both are required to decrypt. No single person at Tathastu can recover your passphrase on their own.
Access Verification
Nominee access uses time-limited JWT tokens (7-day expiry) and one-time-password verification via email or SMS. Every access attempt is logged in an immutable audit trail that nobody can edit or delete.