How to transfer ciphertext without sharing the passphrase

An encrypted package and the passphrase that opens it serve different purposes. Putting both in the same message undermines their separation. VRelay helps copy, save or share a VVault package; it is not a hosted messaging service.

Prepare the test package

Create a package from fictional text in VVault and select Save encrypted file. Keep the fresh test passphrase outside that package. In VRelay, choose Load a .vvault file (optional) and select the actual download. You can also paste encrypted JSON, but record that as a text-transfer test rather than evidence of saved-file recovery. VRelay never asks for the passphrase.

Check and transfer

1. Select Check package format. Treat success as a structural check, not a sender identity check.
2. Use Copy package, Save file or Share package. If sharing is unavailable on your browser, use copy or save and report the limitation.
3. Choose your transfer channel. The sharing app controls delivery and can see the ciphertext and its metadata. Completing a share action does not prove that a recipient received or opened the package.
4. Give the recipient the passphrase through a separately agreed channel. Sending a second message in the same compromised account is not meaningful separation.
5. If the recipient has a file, load it in VRelay and copy its checked package. In VVault, first choose Unlock an encrypted package, paste the copied package and enter the separate test passphrase.
6. Ask the recipient to compare the recovered fictional text with the expected text. Record what worked, failed or was blocked.

What the check means

VRelay validates the envelope structure. It does not decrypt the message, authenticate the sender, inspect the plaintext or establish that the contents are safe. There is no delivery receipt or hosted relay in this release. The VVault round-trip guide explains how to check the recovered text and wrong-passphrase response.

Metadata still matters

Encryption does not hide everything. A provider may still observe who exchanged a file, when it was sent and its approximate size. A filename or accompanying message may disclose context. Avoid descriptive personal filenames even in test workflows.

Keep a usable copy before switching apps

The page clears its session when hidden or after two minutes without input. Save or copy the package before switching away. Clearing the page does not erase files, clipboard history, backups or copies stored by another application.

Report a reproducible result

Use VRelay test feedback. Include the app version, device/OS/browser, which copy/save/share path you tried, expected and actual results, and PASS, FAIL or BLOCKED. Keep the confirmation reference. Leave out the passphrase, package, message contents and personal details; do not assume the private report is anonymous.

These tools are early and unaudited. Use fictional data only. Read the current testing limits or return to Start testing.