How It Works
This is the foundational technology behind Bracket. It solves a problem that has plagued encrypted email for decades: you can’t send someone a secure message if they don’t have encryption software installed.
The system uses a layered key hierarchy to protect messages. An encryption server receives the original message from the sender, generates a symmetric sender key to encrypt the content, then wraps that key with an asymmetric key pair (public/private). The private key is further protected by a master key, and an optional Personal Data Key adds a user-controlled layer. Instead of delivering the encrypted message directly, the system generates a hyperlink to the encrypted content and sends that link to the recipient via standard email. The recipient clicks the link and accesses the message through a secure web interface—no software, no accounts.
The system also supports encrypted reply threads: recipients can reply through the same secure interface, and the reply is encrypted and delivered back to the sender via a new hyperlink, creating a continuous encrypted conversation.
What Makes It Different
- Works with any email client: senders keep using Outlook, Gmail, or whatever they already have. No migration, no plugins.
- Recipients need nothing: no software to install, no accounts to create. Anyone with a browser can receive encrypted email via a hyperlink.
- Multi-layer key hierarchy: Master Key, User Master Key (public/private pair), Data Encryption Keys, and optional Personal Data Keys provide defense in depth.
- Encrypted threads: two-way encrypted reply chains keep entire conversations protected, not just individual messages.
- Scales effortlessly: gateway and encryption servers can be distributed across multiple systems for performance and redundancy.
Why It Matters
Most encryption products fail because they require both sides to participate. This patent eliminates that barrier entirely. Any email address in the world can receive an encrypted message via a simple hyperlink, which means organizations can actually enforce encryption policies without worrying about whether their recipients are set up for it.
This is what makes Bracket fundamentally different from every other email encryption product on the market.