Share files and passwords encrypted, by a link that expires.
Postkey encrypts passwords, notes and files on your device before anything is uploaded. Send a card by link, talk to clients in a live chat and show your screen. The recipient needs no account and no app.
Encrypted on your device
Cards, files and even file names are encrypted on your device with AES-256-GCM before they are uploaded. The server stores encrypted data only.
Share by link, no account needed
A link with an expiry time, optionally with a password, view only or with download, opened once or several times.
Live chat, video call, screen
Talk to clients through a link: chat, video call and showing your screen, encrypted end to end.
Your password stays on the device
Sign-in with OPAQUE: the password itself is not sent to the server. Second factor with an authenticator app or a security key such as a YubiKey.
Cards that delete themselves
In the temporary vault every card expires after the time you choose; the permanent vault keeps what should stay.
Data in the EU
Files are stored encrypted at OVHcloud in Paris with a copy at IONOS in Frankfurt, the database on our own server in Germany.
A vault for everything confidential
Every card holds a title, text and any number of files. Temporary cards delete themselves after the time you choose, permanent ones stay. Labels, favourites and hidden cards keep the vault in order.
- Temporary and permanent vault
- Labels with colours and sub-labels
- Trash with restore
Templates for passwords, Wi-Fi and more
Ready-made card types for passwords with a generator and strength meter, Wi-Fi details with a QR code, payment cards, ID documents, recovery codes and licence keys. A copied secret is removed from the clipboard after 60 seconds.
- Password generator with strength meter
- Wi-Fi details with QR code
- Recovery codes, licence keys, certificates
Previews of PDF, Word, Excel, ZIP and code
Files are decrypted and shown on your device, nothing is converted on a server: PDF, Word, spreadsheets, ZIP archives, code, e-mails, audio and video.
- PDF, DOCX, XLSX and ZIP right in the card
- Code and text with line numbers
- Audio and video players
Photos with encrypted thumbnails
Photos get encrypted thumbnails and a full-screen viewer. The gallery shows the photos of all cards by month.
- Gallery across all cards
- Every file can be downloaded on its own
Share by a link that expires
Choose how long the link works, how often it may be opened, whether the recipient may download, and add a password if you like. The key is in the part of the link after #, which the browser does not send to the server.
- From one hour up to 7 days on the free plan
- View only or download allowed
- The recipient can end the link with one tap
Live chat with clients, by link
Each guest gets a personal link and joins after you admit them with a six-digit code. Messages, photos and files are end-to-end encrypted, and the guest needs no account.
- Up to five guests per chat
- Video call with up to six people, encrypted
- Guest page in German or English
Appointments for companies
Companies with an admitted account create appointment links through the Postkey API. The client picks or moves a time from the opening hours, and the chat opens at that time.
- Client page in German or English
- For admitted accounts, on request
Sign-in and session history
OPAQUE sign-in, a key derived on your device with Argon2id, two-factor with an authenticator app or a security key such as a YubiKey, and a list of your devices. The session history records when a live chat ran and who was admitted, encrypted with your account key.
- Recovery key opens your data without the password
- Log out all other devices
- History of live sessions, encrypted
Postkey in pictures
Video consultation with a shared screen
Shared screen on the phone
A card with construction photos
Vault with company cards
Financing offer as PDF, shown on the device
Gallery of all photos
Cost plan as spreadsheet
Live chat with an adviser and two clients
Show my screen: construction schedule live
A card with 1.73 GB: drone video, plans and PDF
Site meeting minutes as Word document
Send and share: photos, files, screen, live chat
ZIP archive with file tree and code
Appointments of the day: queue, timeline and table
What the server sees, and what it does not.
Postkey encrypts content on your device. The server needs a few facts to work, and we list them openly.
Texts, titles, file names, file contents, thumbnails, labels and link titles. The server receives them only encrypted, together with no key.
Your e-mail address, sign-ins with IP address and browser, sizes and times of cards and files, link settings and when a link was opened.
Your account key is derived on your device. If you lose both your password and your Recovery key, nobody can open the data, not even Sortia Labs.
Files at OVHcloud in Paris with a copy at IONOS in Frankfurt, the database on our own server in Germany.
Questions about Postkey
Is Postkey free?
Currently Postkey offers a free plan: 50 MB of storage, and temporary cards and links last up to 7 days. Paid plans are currently not offered.
Does the recipient need an account?
No. A shared link opens in the browser, without an account and without an app. You yourself need a Postkey account to create and share cards.
Can Sortia Labs read my cards?
Contents, titles and file names are encrypted on your device before they are uploaded, and the server does not receive the key. The server does see some facts, such as your e-mail address, sizes and times; they are listed above.
What happens if I lose my password?
With your Recovery key (eight groups of four characters) you open your data again and set a new password. If you lose both, the data cannot be opened any more, not even by us.
How long does a shared link work?
As long as you choose: from one hour up to 7 days on the free plan. You can also limit how often it may be opened, and the recipient can end the link after reading.
What does a live chat by link offer?
Each guest gets a personal link and joins only after you admit them with a six-digit code. Messages and files are end-to-end encrypted, and you can start a video call with up to six people or show your screen.
Is there an iPhone app?
Not at the moment. Postkey runs as a web app in modern browsers and as an app on Android.
Which language is Postkey in?
The app is currently in English. The pages for guests of a live chat and for booking an appointment are available in German and English.
The know-how behind Postkey, for your project.
More from Sortia Labs
Calendar, tasks, contacts and birthdays in one app, with holidays and reminders, in sync between Android and the browser.
Learn more
Dictation with AI: speech becomes text, translated in the same step if you want. Web app, Android and Chrome.
Learn more
Receipts, bank and VAT in one self-hosted app. AI reads receipts, payments are the source of truth.
Learn moreTry Postkey in your browser.
Create an account, put your first card in the vault and send it by a link that expires.