TN Decrypt

About

TN Decrypt reveals TN protocol messages that appear as opaque ciphertext in the web tools you already use.

When you run encrypted TN events through an online log or observability tool (Datadog, Splunk, Kibana, a webmail view, or any page that renders a TN envelope as text), that tool only stores and indexes the ciphertext. It cannot read the contents, and neither can anyone else looking at the same dashboard. TN Decrypt handles the last step for you. Open the page, click the extension, and choose "Decrypt this page." It finds the TN ciphertexts on that tab and rewrites the ones your reader kit can open, in place, so you can read your encrypted messages right inside the tool you are already in. Anything you do not hold a kit for stays opaque.

Getting your keys in:
- Import a reader kit from a file (any keystore you produced with the TN SDKs or CLI).
- Or pair your tn-proto.org vault and let it deliver the kits you choose.

Free encrypted backups with tn-proto.org:
Pair a free tn-proto.org vault and your reader kits are backed up there as ciphertext, at no cost. Switch browsers or machines, sign in, pair again, and your kits come back. The vault is non-custodial, so it holds only encrypted data. Your keys stay yours, and your recovery phrase is the only thing that can unlock them.

Privacy by design:
- Keys are stored only in your browser and used only on your device.
- The extension reads a page only when you click it (activeTab). No background access to your tabs and no broad host permissions.
- No analytics, no telemetry, and no network requests beyond the vault pairing you start yourself.

TN Decrypt runs the same audited cryptographic core (compiled to WebAssembly) used by the TN SDKs. There is no JavaScript reimplementation of any crypto primitive.