Shadow Drop

Your keys, packages and shares stay the same: only the password that protects your private key changes. Your other sessions are logged out.

Your drop link changes. The links you already gave out, public and one-time, will stop working on the send page: share the new link again. One-time links stay valid, but copy them again from the sidebar.

A new key pair is generated in your browser and the keys of your pending packages and shares are moved to it; files, names and messages are not touched. Afterwards, an old copy of your encrypted private key opens nothing new, even with the password it was under: not the packages that arrive from now on, nor the keys stored on the server now. Whoever already copied a package's old wrapped key can still read that package whenever they get its files: destroy packages once downloaded. If your password may have leaked, change it first. Your other sessions are logged out.