Secure Drop
Anonymous · Encrypted · No login required
Your message is sealed and anonymous. We cannot identify you. No account or login is needed.
Your message
Max 3 files, 10 MB each
Secure Channel
Anonymous · Bidirectional · Encrypted
Start an anonymous conversation. You'll receive a thread code to check for replies later.
Your message
Max 3 files, 10 MB each
Thread Code
Enter your thread code above to check for replies.

GhostFrame

Carry an encrypted message inside an image.

Use an ordinary-looking image as the carrier for an encrypted retrieval token. The recipient imports the image into City of Hats to retrieve the protected message.

No phone number or email required for core Hat use.

City of Hats GhostFrame interface
City of Hats · GhostFrame

The useful difference

A clearer way to handle sensitive work.

01

A discreet carrier

The image carries a token; the encrypted message payload is handled separately.

02

Encrypted message content

The app encrypts the message before it is made available through the retrieval workflow.

03

Delivery rules you choose

Review the supported recipient and lifecycle controls when creating the GhostFrame.

How it works

Three deliberate steps.

01

Choose an image

Import a suitable image and compose the protected message.

02

Create and share

Set the available controls and export the carrier. Sharing the original as a file helps preserve its pixels.

03

Import and retrieve

The recipient imports the image into a supported City of Hats client and follows the retrieval flow.

Know the boundary

Choose controls with clear expectations.

Image resizing or recompression may destroy the token; do not assume every social or chat platform preserves it. Steganography does not guarantee undetectability or anonymity. An authorized recipient may retain what they read.

Review the security evidence

Questions, answered

Before you get started.

Where can I use GhostFrame?

Open City of Hats to review the controls available for your client, content and plan. The app shows applicable requirements before you proceed.

What should I check before sharing sensitive information?

Verify the recipient, use a supported device and choose appropriate access and retention rules. Review the Security Evidence Center for boundaries and evidence status.

City of Hats is free to use. Feature availability and limits vary by plan and client. Premium is optional; review current limits in the app or on the plans page.

Explore what matters next

Build the workflow around your work.

Start with a Hat

Give sensitive work its own space.

Start free. Choose your controls as the work requires them.