HitMeUp integrates seamlessly into GitHub, letting you start secure conversations with developers right where you find their code. No server can read your messages.
All chats are encrypted locally on your device before sending using Web Crypto standards. The server only handles ciphertexts and never sees your raw messages.
Private keys are protected by your secure vault PIN, PBKDF2-derived keys, and stored securely as encrypted blobs. Sync your keys across browsers without compromising E2EE.
HitMeUp injects action buttons ("Message", "Inbox") directly onto GitHub user profile pages, blending seamlessly with the default GitHub layout.
Never miss a message. The extension polls safely in the background and renders notification badges on the Inbox button directly inside GitHub.
Send snippets using standard markdown tags like [CODE:js]console.log("hello");[/CODE] and embed base64/HTTPS images safely inside bubble chats.
Real-time indicators show when your partner is typing. Status entries live in memory and are discarded instantly once messaging ends.
HitMeUp runs a Zero-Knowledge backend. We believe developers deserve secure channels without sacrificing the convenience of profile pages.
All operations are handled directly inside your browser sandbox via standard Web Crypto APIs, making it impossible for the API server or Supabase databases to intercept your keys or chats.
A P-256 ECDH asymmetric key pair is generated locally on your browser. The private key never leaves your device unencrypted.
When you start messaging, your private key and the receiver's public key are used to compute a unique, shared symmetric key using Elliptic Curve Diffie-Hellman.
The message text, code blocks, or images are encrypted locally using AES-256-GCM. The encrypted ciphertext blob is uploaded to the backend server.
To access chats on other devices, your private key is encrypted with an AES key derived from your custom PIN via PBKDF2 (600,000 iterations + salt) and stored as a backup blob.
HitMeUp for GitHub has been successfully installed. Refresh GitHub to start messaging.