Sharing is where good habits go to die
We text Wi-Fi passwords. We forward a screenshot of a school login. We put a door code in a group chat that still includes a babysitter from 2019. That is sharing without a lock meant for a person.
HPKE—Hybrid Public Key Encryption—lets a sender lock data so that mainly the matching recipient key can open it. You do not need to invent a shared password and hope the thread stays private forever.
Public key, private key, in one picture
A mailbox slot is public. Anyone can drop a letter in. The key to open the box is private. HPKE uses a modern version of that idea, with X25519 and HKDF-SHA-256 as named parts.
If you share the private key, the mailbox is no longer yours. If you only share the slot, people can give you sealed letters without reading the old ones.
What you still decide
Cryptography does not choose who deserves access. You do. Know why someone needs a secret, and when that reason ends. A clean recipient lock is wasted if you also paste the same secret in SMS.
Stax Pass uses HPKE for protected recipient-bound exchange. Family members still have their own logins on the family plan. Help is not the same as a forwarded password.
Is this worth paying for?
The expensive version of sharing is a screenshot that lives forever. Paying for a manager that can protect data for a person is cheaper than rotating every password after a messy thread. Try Stax Pass and practice sharing less, on purpose.
Take this with you
- HPKE seals data for a specific recipient, not a chat thread.
- You still choose who is the recipient and when access should end.
- Do not also send the same secret in a text.
Common questions
Is this email encryption?
It is a general standard for locking to a public key. Products apply it in their own flows. Ask what is locked and who can open it.
Can Stax Pass read what I share?
Recipient-bound protection is designed so the intended private key opens it. Support is not a hidden extra recipient.
Do I manage keys by hand?
No. Your job is deciding who should get access. The app handles the key math.