Access to your passphrase and private keys

Your passphrase is not stored on the Hushmail servers. Instead, a special hashed value is stored for authentication. The original passphrase cannot be determined from that hashed value.

Your passphrase must be used to decrypt your private keys. During authentication, your passphrase is sent to one of our secure servers over an encrypted connection where it is used to decrypt your private key before being discarded.