About this plugin
w3mypq provides a privacy-focused file encryption and sharing tool for WordPress. Files are encrypted in the user’s browser before upload using ML-KEM and AES-GCM.
The plugin combines modern cryptographic standards with low-level binary packing, thread isolation, and forensic memory management. Its low-overhead, browser-based w3Gemini engine supports secure and fast post-quantum file sharing between users.
What you must know: This plugin aims to be a high-security tool that guarantees absolute data sovereignty by design. To achieve this, the plugin utilizes state-of-the-art post-quantum cryptography. It is engineered so that even if the service provider’s servers are compromised, attackers only find useless, encrypted data because nobody else possesses the users’ private decryption keys.
This architecture offers the highest level of security, assuming the integrity of the core cryptographic code. The deployment must remain free from modifications that compromise private keys or exploit payload structures via unauthorized public key injection and user impersonation.
As a user, if you worry about a compromised server or a malicious administrator, BPQ turns WordPress sites worldwide into a global, decentralized sharing network. By using the standalone BPQ client gateway loaded locally (and NOT served by WordPress), there is absolutely no way for a server-side attacker to inject public keys or tamper with the code. Your keys and encryption routines remain 100% secure.
Decentralized file sharing in WordPress.
Features
- Implements ML-KEM 1024 for post-quantum key encapsulation.
- Supports ML-DSA 87 signatures for sender verification.
- Utilizes AES-GCM-256 for symmetric file encryption.
- Encrypts files locally in the browser before upload (Zero-Knowledge).
- Supports sharing files with one or more recipients.
- Displays the user’s daily upload quota and the remaining time until it resets.
- Recipients decrypt files locally using their own private keys.
- Guest mode for local-only encryption and decryption.
- Designed around NIST post-quantum cryptography standards.
Admin Options
- Maximum attachment file sizes configuration.
- Daily user storage upload quota limits.
- User role permissions access level controls.
- Dynamic encrypted file retention storage periods.
- Maximum unique recipients allowed per file.
- Cryptographic Security Headers & Shields options.
- Ghost Rider, a powerful and experimental PQ Server WordPress Shield.
- The Vault Module Maintenance feature provides easy options to execute targeted administrative cleanup routines on the server or for testing purposes.
Manage all configuration panels by navigating to: WP Admin -> Settings -> w3mypq.
How to for users
- How to, Tips and FAQ
Online example
- Online example