Get the App
Secure Drop
Anonymous · Encrypted · No login required
Your message is sealed and anonymous. We cannot identify you. No account or login is needed.
Your message
Max 3 files, 10 MB each
Secure Channel
Anonymous · Bidirectional · Encrypted
Start an anonymous conversation. You'll receive a thread code to check for replies later.
Your message
Max 3 files, 10 MB each
Thread Code
Enter your thread code above to check for replies.
🔑 Unlock Content

Passphrase-Protected
Messages.

Add a secret unlock code to any message. Recipients must enter the correct passphrase to decrypt and read. Double-layer encryption — even if someone has the device, they still need the code.

Set the Unlock Code

Compose your message, set a passphrase, and send. The recipient sees a locked message that requires the code to reveal its contents.

City of Hats Unlock Content Setup
City of Hats Unlock Content Message Arrived

Enter Code
to Reveal

When an Unlock Content message arrives, the recipient sees it requires a passphrase. The message stays fully encrypted and unreadable until the correct code is entered.

  • Message displays a lock prompt — no preview, no snippet, no metadata leakage
  • Double encryption: standard E2E plus passphrase-derived key layer
  • Correct code instantly decrypts — wrong code reveals nothing

Two Keys Are Better Than One

Unlock Content adds a human-controlled passphrase layer on top of standard end-to-end encryption.

🔑

Passphrase-Gated Access

The sender defines a secret code at send time. Without this code, the message content is completely inaccessible — even to someone holding the recipient's device.

PASSPHRASE
🔐

Double-Layer Encryption

Messages are first encrypted with standard E2E keys, then wrapped in a second layer derived from the passphrase. Two independent encryption barriers protect every message.

ENCRYPTED
🛡️

No Hints or Recovery

There are no password hints, no recovery options, and no brute-force workarounds. If you don't know the code, the message stays locked forever.

ZERO-KNOWLEDGE
📎

Works with Everything

Lock text messages, file attachments, images, or any content type. Unlock Content works seamlessly with all City of Hats message formats.

UNIVERSAL

How Unlock Content Works

Four steps from composition to passphrase-gated decryption.

1

Compose Message

Write your message and add any attachments as usual. Text, files, images — everything can be passphrase-locked.

2

Set Passphrase

Choose a secret unlock code. This passphrase is used to derive a second encryption key. Share it with the recipient through a separate channel.

3

Send Locked

The message is double-encrypted and sent. The recipient receives a locked message with no content preview — just a prompt to enter the code.

4

Enter Code & Read

The recipient enters the passphrase. If correct, both encryption layers are removed and the message appears instantly. Wrong code? Nothing happens.

✍️
Compose
Write your message
🔑
Set Code
Choose a passphrase
🔒
Locked
Double-encrypted in transit
🔓
Unlock
Enter code to decrypt

When to Use Unlock Content

Any time you need an extra layer of security beyond standard encryption.

💼

Confidential Business

Send contracts, financials, or trade secrets with a passphrase shared in person or over a call. Even a compromised device reveals nothing.

⚖️

Legal Documents

Attorneys can lock privileged communications behind a code shared only with the client. No unauthorized access, no accidental exposure.

🏥

Medical Records

Healthcare providers can share patient data locked with a code known only to the patient. HIPAA-grade access control at the message level.

💰

Financial Information

Account numbers, credentials, and financial details protected by a passphrase. Even if the chat is accessed, the sensitive content stays locked.

📰

Journalism & Sources

Lock sensitive information behind a code agreed upon in advance. If the journalist's device is seized, the locked messages reveal nothing.

🎁

Personal Secrets

Share passwords, surprise plans, or private information with an extra lock. Only someone who knows both you and the code can read it.

What We Enforce

Unlock Content is built on zero-knowledge passphrase handling and double-layer encryption.

Enforced by Architecture

  • Passphrase-derived key generated on sender's device only
  • Double-layer E2E + passphrase encryption
  • No content preview or metadata leakage when locked
  • Instant decryption with correct passphrase
  • Works with all message and attachment types
  • Passphrase never transmitted to servers

Never Allowed

  • No server-side passphrase storage
  • No password hints or recovery options
  • No brute-force or bypass mechanisms
  • No content preview before unlocking
  • No third-party access to passphrase-derived keys