Browser security for email & web

Secure sensitive text before you hit send

Veil turns secrets into [redacted] or team tokens inline — encrypted in the browser. Recipients unlock on the same page. Your server never sees plaintext.

Set up your team Join a team Install extension

Encrypt in place

Highlight or paste an API key, card number, or password. Veil replaces it with [redacted] — teammates click to unlock.

Tokenize for email

Share [veil:vt_…] placeholders across Outlook, Gmail, and other clients. One click reveals for anyone in your org.

Copilot on paste

Veil detects sensitive data as you compose and offers Encrypt, Mask, or Tokenize before mistakes leave the browser.

How teams get started

Admin creates a team → receives a join code and admin key.
Members install the Veil extension and join with work email.
Everyone pastes or highlights secrets in Outlook / Gmail → secures inline → sends as normal.

IT can push the extension and team passphrase via Chrome or Edge policy — no manual join required.

Security & privacy

Encryption runs locally in the browser (AES-GCM + PBKDF2).
Veil’s cloud API stores org membership and token ciphertext — not your secrets or passphrases.
Security events log metadata only (no matched content).