What is Secria?
Secria provides a fully encrypted email service designed to protect user communications with advanced security features. The platform utilizes zero-knowledge architecture where all cryptographic operations occur in the user's browser using the WebCrypto API, ensuring that even the service provider cannot access message content. This approach guarantees privacy protection against any adversary, including under legal compulsion.
The service employs hybrid post-quantum encryption combining ML-KEM-1024 with X25519 ECDH for key exchange, followed by AES-256-CBC for message encryption. Each email uses unique ephemeral keys with perfect forward secrecy, preventing compromised keys from affecting other communications. Additional security measures include Argon2id authentication with memory-hard password hashing, TLS 1.2+ transport security, and comprehensive breach monitoring through the Secria Sentinel service for Plus and Pro subscribers.
Features
- End-to-End Encryption: Emails encrypted before leaving device and only decrypted by intended recipient
- Zero-Knowledge Architecture: Cryptographic operations occur in browser; provider cannot access messages
- Post-Quantum Cryptography: ML-KEM-1024 hybrid encryption resistant to quantum computer attacks
- No Tracking: Blocks tracking pixels and prevents senders from monitoring email engagement
- Alias Protection: Create secure email aliases to protect identity and reduce spam
- Secria Sentinel: Advanced breach monitoring with multi-source detection and instant notifications
- Perfect Forward Secrecy: Each email uses unique ephemeral keys preventing compromise of other communications
- Hybrid Key Exchange: Combines X25519 ECDH with ML-KEM-1024 using HKDF-SHA256 key derivation
Use Cases
- Secure business communications requiring confidentiality
- Personal email for privacy-conscious individuals
- Protecting sensitive information from data breaches
- Preventing email tracking and surveillance
- Creating disposable email aliases for online registrations
- Future-proofing communications against quantum computing threats
- Compliance with data protection regulations requiring encryption
FAQs
-
What is post-quantum encryption and why is it important?
Post-quantum encryption uses cryptographic algorithms resistant to attacks from quantum computers, protecting against 'harvest now, decrypt later' threats where encrypted data is collected today for future decryption when quantum computers become available. -
How does the zero-knowledge architecture work?
All cryptographic operations occur in your browser using WebCrypto API, meaning your private keys never leave your device unencrypted and even Secria cannot decrypt your messages. -
What is included in the Secria Sentinel service?
Secria Sentinel provides advanced breach monitoring with multi-source detection, smart risk assessment with severity scoring, and instant notifications about potential data breaches affecting your account. -
Can I use custom domains with Secria?
Yes, custom domains are available with Plus and Pro plans, with Plus offering 3 custom domains and Pro offering 10 custom domains. -
What happens if I forget my password?
Due to the zero-knowledge architecture, Secria cannot reset your password or recover your encrypted data, as they don't have access to your encryption keys.
