At SharePass, we provide an online solution for sharing secrets and confidential information using a web application, no agent installation. SharePass will do this by giving you the ability to send an encrypted link to anyone you want to share this information with.
When it comes to data privacy, you may be worried about how your password is treated during input and how privacy is assured. SharePass or any of its employees cannot see the passwords; actually, no one but the recipient can.
The secret you are sharing is encrypted using the AES standard. The decryption requires a random password that SharePass doesn’t know.
SharePass temporarily keeps the encrypted secret until it is open or expired. The secret message is unreadable for SharePass as it doesn’t have the decryption password. There are more advanced options for this function for Enterprise accounts.
So,
If SharePass doesn’t know the password, how can the receiver access the secret delivered?
The required password for decryption and the secret ID are added to the link you are sharing. Once the receiver clicks the link, SharePass will decrypt the secret using the password and the ID from that link, So make sure you are sending it to the right person. The decryption process is handled on the receiver’s device, so SharePass never knows the secret that has been shared because the password for decryption is never sent to the SharePass platform.
As mentioned, once delivered or expired, the secret will be terminated.
I’d also like to touch on a technical aspect worth mentioning. SharePass is based on a Serverless Application Model (SAM), allowing SharePass to be energy efficient. SharePass will run its core services only on demand, which means SharePass doesn’t have idle servers online.
