4 Easy Words

Congratulations! Now tell anyone to decrypt these words in this app.

They'll get the details you entered.

Only the person with the words can decrypt.

We'll delete everything in 1 minute for your security.

How does it work?

1. Enter your credit card details and we store them as a highly encrypted blob. No login required.
2. We randomly generate four easy words. Tell those to any recipient. It's so fast!
3. They tap the switch to "decrypt" mode on their end and enter those words. (Login required.)
4. Boom! They see the card details you entered.
5. We delete the encrypted blob on decryption. Even though your data is encrypted at rest, we delete it ASAP for your security.
6. If nobody decrypts your blob then it's deleted in 60 seconds. Nobody can decrypt your card details at a later time.

How do you charge?

• Free forever for cardholders sending card details.
• The first 10 decryptions per user per month are free. After that they cost $0.01 or €0.01 each.
• This means that small merchants pay nothing, merchants with higher volume business make more than their money back in staff time savings, and there's no scary commitment. Just pay a super low fee for what you use. It's an easy win and very predictable.

Security

High security is a key feature.

• The vast majority of English speakers know at least 40,000 words. The odds of guessing the right combination of 4 of these is 1 in 2,560,000,000,000,000,000. Not even Sherlock Holmes or Arsène Lupin could do that.
• All credit card details are encrypted in the app before transmission, using the latest cryptography technology.
• All connections are themselves additionally encrypted.
• We use 4096 bit RSA-OAEP keypairs. That's the maximum length and double the widely used default. It would take more than the lifetime of the universe to crack one by brute force.
• Only the public key is shared to your web browser, never the private key. Data encrypted by the public key cannot be decrypted by it.
• We regularly roll to new keypairs. It should be impossible for any attacker to gain either a private key or encrypted data, but they ever gain both then previous and future data will be useless to them because that will have been encrypted using different keys.
• Encrypted card details are deleted from our servers immediately upon decryption. This keeps cardholders in control of who can receive them, and leaves nothing for any potential attackers who may attempt to later steal data.
• We hold encrypted card details on our servers for a maximum of 60 seconds, deleting it at this time. This makes life even harder for potential attackers. If we don't have your data anymore then it can't be stolen.
• This short life protects cardholders in an additional way: card details that were not decrypted for any reason cannot be unexpectedly decrypted later, even by someone who legitimately received their four words.
• We use only top-tier, name-brand PaaS providers.
• We do not track users around the web. You are not the product.
• We take care to avoid logging your data.

Payment

Thankyou for supporting the continued operation and improvement of Four Easy Words.

• The first 10 decryptions per user per month are free.
• After that each one costs a mere €0.01, or USD $0.01, or a near equivalent in your local currency.
• Your card will be charged at the end of each month until you cancel or simply stop using Four Easy Words.