What E2EE changes
End-to-end encryption encrypts private bookmark data in the client app with an E2EE passphrase before bookmark data is sent to WebCull. This applies across WebCull surfaces that handle private bookmark data, including the web app, browser extensions, desktop apps, and native apps. The account password still protects account login and account-level actions. The E2EE passphrase protects encrypted bookmark content and is required whenever the current device or app context cannot use a valid remembered key.
Separate credentials
The account password and E2EE passphrase are separate. Turning E2EE on, turning it off, or changing the E2EE passphrase requires account password verification. Decrypting bookmark data requires the E2EE passphrase or a remembered key.
Turn E2EE on
E2EE is enabled from the private bookmark manager settings under End-to-end encryption (E2EE). Switching the E2EE slider on starts a guarded flow rather than immediately changing the account.
E2EE cannot be enabled from the public URL surface. It is a private bookmark manager security setting.
Use a custom passphrase or generated key
The setup dialog accepts any E2EE passphrase that is at least 4 characters and matches in both entry fields. A longer passphrase or generated key is strongly preferred because WebCull cannot recover it for you.
Generate a strong key link opens a generator that creates a long random key for the account.webcull-e2ee-key.txt, or inserted into the E2EE setup fields with Use this Key.Generated does not mean recoverable
A generated key is only shown to you. Saving the generated key file or storing it in a password manager is still your responsibility.
Remember the E2EE key locally
The E2EE setup and login dialogs can save the key locally for 60 days on the current device or app context. When this is enabled, WebCull can decrypt local bookmark data there without asking for the E2EE passphrase again until the stored key expires or is removed.
E2EE Key Remembered setting shows whether the encrypted key store is on and how many days remain.Turn E2EE off
Disabling E2EE is also a conversion flow. The app must verify both the account password and the current E2EE passphrase before it can start decrypting the account data back to the non-E2EE state.
Change the E2EE passphrase
The Change E2EE Key action rotates the E2EE passphrase. This is available while E2EE is on. The settings page also shows when the E2EE passphrase was last changed and the recommended next change date.
Encryption and decryption are chunked
When E2EE is enabled, disabled, or rotated, WebCull updates bookmark data in batches. This keeps large accounts responsive while the conversion runs.
Mixed states are expected during conversion
During an enable, disable, or key rotation, some items can briefly finish before others. Keep the app open when possible, and let WebCull resume the conversion if the page reloads.
Feature behavior when E2EE is on
E2EE changes features that normally depend on WebCull servers being able to read bookmark URLs or public sharing state.
Media embeds with E2EE
Media embeds are controlled by the private bookmark manager Media Embeds setting. The detailed provider list, proxy parsing relationship, and third-party request boundary are documented in Proxy parsing and media embeds.
Media Embeds toggle. It defaults off, so enabling E2EE does not automatically allow third-party embeds.Media, then turn Media Embeds on. If E2EE is enabled, WebCull shows a privacy warning before saving the setting.Media Embeds slider and switch it off. Turning the setting off saves directly and stops WebCull from rendering provider embeds in bookmark detail panels.Recovery caveats
The E2EE passphrase cannot be recovered like an account password. If the passphrase or generated key is lost and no valid remembered key remains on a browser, encrypted bookmark data can become permanently unrecoverable.