Skip to content
A A
All work

/ work / arcanis

Arcanis

End-to-end encrypted messaging — the server never sees a word.

2026 Web app
View live Source
Arcanis landing page

About

A secure messaging web app. All encryption and decryption happens on the client using the Web Crypto API: AES-GCM for message content, RSA-OAEP for key exchange. Private keys never leave the browser. The server stores only ciphertext blobs. Built around the WhisperBox API with JWT auth, public-key exchange, and graceful handling of decryption failures — including an inline error state for messages that can't be read.

Tech

  • React
  • TypeScript
  • Web Crypto API
  • AES-GCM
  • RSA-OAEP
  • IndexedDB
  • JWT