VANISH PRIVATE CHAT GUIDE
Why the secret sits after the hash sign
URL fragments let a browser keep part of an invite out of ordinary requests to the website server.
What a fragment is
In a web address, the fragment begins with a hash sign. Browsers use it locally and normally omit it from HTTP requests. Vanish places the random secret there.
What this protects
The Vanish backend receives the room identifier and an authorization value, but not the fragment secret used to derive the message encryption key.
What it cannot protect
A recipient, browser extension, compromised device, screenshot, pasted link, or public post can still expose the complete invite.
Before you start
Do I need an account to create a room?
No. Create a free temporary room in your browser and share its complete secret invite directly.
Can recipients keep copies after expiry?
Yes. Room expiry stops access through Vanish, but it cannot erase screenshots or other copies made by recipients.