End to end encrypted browser chat on Vaults

Vaults ships a private, end-to-end encrypted chat feature inside the dashboard at vaults.lol/dashboard/chats. It is a real messenger built into a link in bio tool: create a room, share a random 6 character key, and talk in real time. Messages, replies, reactions and files transfer directly between the browsers in the room over WebRTC.

End to end encryption means the messages are encrypted on the sender's device and only decrypted on the recipient's device. The service in the middle cannot read them. Vaults chats use WebRTC with DTLS/SRTP, which is end-to-end encrypted between the browsers in the room. The keys are held by the peers, not by our servers.

Our signalling server helps two browsers introduce themselves so they can connect. It sees that a connection is being negotiated. It does not see message content, files, replies or reactions. Nothing about a live chat is written to our database. Close the last tab and the room stops existing.

1) Sign in with a Vaults account on Lifetime (€5 one time) or Supporter. 2) Open vaults.lol/dashboard/chats. 3) Click Create Room. 4) Share the 6 character key with the people you want in the room. Anyone else with a Premium Vaults account can paste the key and join. Everyone talks in real time, browser to browser.

Anyone who wants a private group chat with friends without installing an app, without giving a phone number, and without leaving a message history on some company's server. It is not marketed as a replacement for hardened messengers like Signal for high-risk threat models, but for normal private group chats between people who trust each other, it is one of the easiest end-to-end encrypted browser chat options around.

Vaults chats are not a public chat room, not a discovery feed, not a Discord replacement, not a permanent group. They are private, session based, invite only. When the last person closes the tab, the room ends. There is no message archive to search or restore.

Privacy does not change the rules. Vaults chats cannot be used for illegal content, exploitation, harassment, scams, malware, threats or abuse. Rooms found or reported to be used for that will be blocked and reported to the appropriate authorities where the law requires it.