You seal the note to an address
Your browser encrypts it under a fresh one-time key. We store the ciphertext against the recipient's address. The key stays with you.
Write to any wallet. Your note is encrypted in your browser and opened by one address. Unreadable by everyone else, including us.
Your note is locked before it leaves your browser, opened only by keys that their wallet can derive, and carried by servers that see nothing.
This is the production cipher running on this page with two throwaway identities. The middle column is everything our database would hold.
Most encrypted messengers make the recipient sign up before you can write to them. Eve does not. Address a note to any wallet on Robinhood Chain today, and it waits, sealed, until its owner shows up.
Your browser encrypts it under a fresh one-time key. We store the ciphertext against the recipient's address. The key stays with you.
The recipient connects, signs once to derive their keys and once to publish them. We release ciphertext only to the address it was sealed for, and only they can open it.
If someone subpoenas it, steals it or leaks it, this is what they get. One row per note. No column holds anything readable, because nothing readable ever arrives.
| Column | What is stored | What it reveals |
|---|---|---|
| id | kJ3vQ0nX2cTt8mWq1yRb5A | Random. Says nothing about the note. |
| sender | 0x8f3c...a41e | Public wallet address. |
| recipient | 0x27b0...9d06 | Public wallet address. |
| nonce | q2lWm8Jr0pX4vN7sKc1dZtY9hB3uEo6f | Public by design. Useless without the key. |
| ciphertext | x9Fh2kLm...4,096 more bytes...Qw7Zr1 | The note, encrypted and padded so length leaks little. |
| recipient_wrap | epk + nonce + 48 sealed bytes | The note key, locked to the recipient. We cannot open it. |
| sig | Ed25519, 64 bytes | Proves the sender. Checked by the reader, not by trust in us. |
Eve does one thing. It moves words from one wallet to another without anyone in between being able to read them.
Room for a real letter, a term sheet or a full set of instructions. Not a text box with a character cap.
Address a note to your own wallet. A private vault that follows your keys to any browser.
Flag a note and it is erased from our database the moment the recipient opens it.
Every note carries a signature the reader verifies locally, so nobody can forge a sender. Not even us.
Eve only asks your wallet for signatures. Nothing is written on chain and nothing is spent.
No accounts, no email, no phone number. If you hold a Robinhood Chain wallet you already have an inbox.
Eve uses the wallet you already hold as your identity. Sending a note needs no approval, costs no fee and writes nothing on chain. Connecting adds the network to your wallet if it is missing, and that is the only thing it changes.
Privacy tools earn trust by being specific. The docs walk through every screen, and the protocol page goes field by field.
No. Notes are encrypted in your browser before they are sent. Our servers and database only ever receive ciphertext, and the keys that open it are derived inside your browser from a signature only your wallet can produce. There is no master key and no recovery backdoor.
Your note is sealed with a one-time key that never reaches us. You get a private link that carries that key in the part of the URL browsers never send to servers. The recipient opens it, proves they own the wallet, and the note unlocks. If you would rather not share a link, just tell them to visit Eve. Once they set up their keys, your device hands the note key over automatically the next time you open the app.
When someone first unlocks Eve, their wallet signs a public statement naming their encryption keys. Every sender checks that signature in the browser before encrypting. If our directory ever served a swapped key, the check would fail and nothing would be sent.
Sender address, recipient address, a timestamp, the padded size of the ciphertext and whether the note has been opened. Never the text. The Protocol page lists every stored field.
Your Eve keys are derived from your wallet, so whoever controls the wallet controls the inbox. Lose the wallet and the notes are unreadable forever. We cannot reset anything, by design.
In cryptography papers, Alice and Bob exchange messages while Eve, the eavesdropper, listens in. We built the listener who hears nothing.