Encrypted on your device. Synced through the cloud. Readable only by you. Not us, not your provider, not anyone.
How it works
Three steps. No complicated setup. No passwords to manage. Just your email and a recovery phrase.
We send you a magic link. Click it, you're in. No password to create, remember, or get phished.
You receive a 12-word recovery phrase - like a crypto wallet. This is the only key to your bookmarks. We never see it.
Add bookmarks from any device or browser. Everything encrypts on your device and syncs automatically.
The problem
Your bookmarks reveal what you read, research, and care about. They're stored in systems you don't control, synced through services that can read them, and locked into a single browser.
Browser sync services may encrypt in transit, but you don't hold the keys. The provider can access your bookmarks at any time.
Safari doesn't sync to Chrome. Chrome doesn't sync to Firefox. Your bookmarks are trapped in one ecosystem.
Your browsing interests become someone else's data. You have no say in how they're stored, analyzed, or monetized.
Architecture
Encryption happens on your device using AES-256-GCM before anything leaves it. The server is a dumb blob store.
Even in a database breach, an attacker gets meaningless ciphertext. Only your 12-word recovery phrase can unlock it.
Use case
Using Tor, Brave, or incognito mode? Your bookmarks disappear when you close the session. That's the point - but it means starting from scratch every time.
Whispermarks fills that gap. Open the app, unlock your vault, click a bookmark, browse privately, close everything. Your bookmarks persist. Your browser history doesn't.
Transparency
Your email is your identity. It does two things: sign-in and routing encrypted blobs. It's never connected to your bookmark content - the server can't decrypt it.
Magic link. No password to create or leak.
Maps your email to your encrypted blobs.
Email and bookmark content live in different encryption domains. Knowing your email reveals nothing about your bookmarks. We will never sell or share your email.