Speak or type
Speech is a convenience; typed entry provides a fallback without using the microphone.
EchoDrop
A passphrase instead of a retrieval link.
Protect an encrypted message with a passphrase. The recipient can type it, or use the supported speech-recognition option to enter it.
No phone number or email required for core Hat use.
The useful difference
A clearer way to handle sensitive work.
Passphrase-based encryption
The app derives the encryption key from the passphrase using PBKDF2 and uses AES-256-GCM for the message payload.
Choose the lifecycle
Review the available retrieval count, expiry and time-lock settings when creating the drop.
How it works
Three deliberate steps.
Compose the message
Choose the supported lifecycle rules and a strong passphrase.
Share the phrase securely
Use a trusted separate route to tell the intended recipient the phrase.
Enter and retrieve
The recipient types or speaks the phrase, then follows the retrieval flow.
Know the boundary
Choose controls with clear expectations.
Browser speech recognition may use a remote recognition service; local processing is not guaranteed. For sensitive phrases, consider typed entry and review the browser’s privacy behavior. A guessed, shared or exposed passphrase weakens protection, and recipients can retain content after opening.
Review the security evidenceQuestions, answered
Before you get started.
Must I use my voice?
No. The passphrase can be typed. Speech recognition is an optional convenience.
Is browser speech processing always local?
No. The current browser speech-recognition path does not enforce local processing. Depending on the browser, a recognition provider may process audio.
City of Hats is free to use. Feature availability and limits vary by plan and client. Premium is optional; review current limits in the app or on the plans page.
Explore what matters next
Build the workflow around your work.
Start with a Hat
Give sensitive work its own space.
Start free. Choose your controls as the work requires them.