Open your tip inbox
The intake key decrypts every tip sent to your tip line. It never leaves this browser; there is no account and no server. Anyone who has this key can read your sources' messages — treat it accordingly.
Setting up a tip line? Generate a new intake key
— store it offline; it is the tip line.
Protect the intake key on this device? Store it
passphrase-encrypted (NIP-49) in this browser — the encrypted key is
then the only thing persisted.
not now
Sources see the name on the submit page. The share URL is
your public tip line — put it anywhere; the fragment (#npub…) never
reaches any server.
Rotate intake key (compromise, staff departure)
Mints a fresh intake key and share URL. The old key
keeps decrypting incoming tips and case dialogues during the sunset
window (threads show a “retired key” badge); when it ends, the old
key material is deleted and the old share URL goes dark for good.
Update the published share URL everywhere.