Password-less Encryption Assistant
I have always cringed every time a client, colleague, or friend decides to entrust sending sensitive documents, files, and passwords onto Whatsapp, e-mail, and the likes. By now, most people know that this is NOT SAFE! This is part of the reason why there are so many identity thefts and companies leaking customer information out there.
On the other hand, password-less (key-based) encryption is either too cumbersome/complicated to use for the average user (ie. GPG) or they are chat apps implemented in a way where the host can easily decrypt your information. (ie. Telegram has the master key to decrypt your data). So you might ask, what about Signal? Well, Signal is relatively one of the safest but what good does it do if not enough of your friends are on it? On top of that, its usability/features are lacking compared to Telegram. I personally don’t need yet another chat app to install just for securely sending files. Furthermore, like me, you might also like to reference files with conversations that are had on so many different apps you use with different people which makes it impossible if you are stuck using a specific app just to send files securely.
Given the above, I have searched high and low for a solution so that my consultancy can more securely share data with each other internally as well as with our clients. Unfortunately, I could not find a solution that meets all the requirements. So for the past month and a half, I have decided to take my 10% personal project time to build a proof of concept to address this cringe.
As a result, I would like to share with you:
InstaCrypt - a password-less file encryption assistant.
There are two parts to InstaCrypt:
- InstaCrypt Vault, a web portal that consist of social-networking-like features for users to add each other as “approved contacts” (ie. just like adding friends on Facebook) so that it is able to help you manage all the publishable components of conducting password-less encryption.