Iris · Documentation

Everything you need
to get started.

From your first sign-in to keys, files and calls. Each guide explains what Iris does, what it asks permission for, and exactly what it can and can’t protect.
Setupsign in · keys · first message

Getting started

Sign in with Google or Microsoft, protect your keys with a passkey, and send your first encrypted message in a few minutes.
  • Sign in with Gmail, Google Workspace, Outlook or Microsoft 365
  • Create your keys and unlock them with a passkey
  • Back up your keys and save your recovery code
  • Invite a contact and send your first encrypted message
See more+
Step 01
Sign in
Choose Google or Microsoft. You sign in on their page, so Iris never sees your password. Your address, contacts and history stay exactly where they are.
Step 02
Create your keys
Iris creates your keys on this device and protects them with a passkey (Face ID, Touch ID, Windows Hello or a security key). Nothing to remember.
Step 03
Back them up
Save an encrypted backup to your own Google Drive and keep your recovery code somewhere safe. Together they let you set up a new device if this one is lost.
Step 04
Write to someone
Mail to people on Iris is encrypted automatically. For everyone else, invite them from the compose window, or send as usual and Iris signs it.
# what Iris asks for when you sign in
Google: read, organise and send mail · a private app folder in your Drive · calendar events
Microsoft: read, organise and send mail
Never: your password

Iris is in beta. While Google completes its review of Iris, you may see a “Google hasn’t verified this app” screen during sign-in. Choose Advanced, then continue to Iris.

Encryptionsealed · signed · locks

How encryption works

When a message is end-to-end encrypted, when it’s signed instead, and how the lock next to every message tells you which.
  • Sealed on your device with your recipient’s key
  • Signed for people who aren’t on Iris yet
  • The four lock states, and what each one means
  • What your provider can and can’t see
See more+
Verified
Encrypted, key checked
Sealed to your contact’s key, and you’ve compared keys with them. The strongest state.
Encrypted
Only they can read it
Sealed on your device to your contact’s key before it leaves the browser. Your provider stores ciphertext.
Signed
Not on Iris yet
Delivered as normal email over TLS. It isn’t end-to-end encrypted, but Iris signs it so the recipient can check it came from you.
Key changed
Verify first
Your contact’s key is different from last time. Iris pauses sending to them until you verify the new key.

End-to-end encryption applies only between Iris users, and only in the cases listed in the security model, which sets out the exact conditions. Mail that isn’t end-to-end encrypted is handled by Iris’s mail service over TLS, the way any mail client sends it. The lock is shown next to every message and every person, so you never have to guess which applies.

Leak checkcards · IDs · attachments

Leak check

Catches card numbers, bank details and ID numbers in your message and its attachments before you send. Runs entirely on your device.
  • What it looks for: cards, bank accounts, IBANs, passport and ID numbers
  • Attachments: PDF, Word and Excel files are read on your device
  • Remove it, or send anyway: you always decide
  • Team rules: block or warn, set once for everyone
See more+
# draft: "Here are the payment details. Card: 4111 1111 1111 1111"
finding: card number · where: message body
action: WARN → “This looks like a card number. Remove it, or send anyway?”

The leak check makes no network call: the text and attachments it reads never leave your device. It looks for structured numbers such as card and account formats, so it won’t catch everything sensitive. It doesn’t read images. On the Team plan, an admin can set which findings block a send and which only warn.

Keyspasskey · backup · verify

Keys, devices and recovery

Where your keys live, how to add a device, how to recover if one is lost, and how to verify the people you write to.
  • Keys live on your devices, unlocked with a passkey
  • Encrypted backup in your own Drive, plus a recovery code
  • Adding a device, and removing one you’ve lost
  • Verifying a contact, and what a key-change warning means
See more+
Backup
Your Drive, encrypted
The backup is encrypted before it’s uploaded to a private Iris folder in your Google Drive. FluidPrism never holds a copy of your keys.
Recovery
Your recovery code
If you lose every device and your passkey, the recovery code opens your backup. Keep it offline. Without it, encrypted mail can’t be recovered by anyone, including us.
Verify
Compare once
Read the short code to your contact on a call or in person. If it matches, mark them verified. If their key later changes, Iris tells you and pauses sending.
Vaultdrive · files · links

Vault and large files

Keep files encrypted in your own Google Drive, and send files too big for email as an encrypted link that expires.
  • Folders, previews and secure notes
  • Sharing with people on Iris, or as a secure link
  • Large attachments sent through your Drive, encrypted
  • Choosing how long a file stays available
See more+

Vault files are encrypted on your device and stored in your own Drive; previews decrypt in memory and are cleared when you close them. Attachments larger than about 18 MB go through your Drive automatically: people on Iris can play them inside the message, and everyone else gets a secure link that expires after 7 days, 30 days, or when you delete it.

Chatchannels · DMs · calls

Chat and calls

Channels, direct messages and voice or video calls with anyone on Iris, end-to-end encrypted.
  • Channels and direct messages
  • Files, voice notes and replies in threads
  • Voice and video calls, one to one or in a group
  • On your phone: Mail and Chat as two apps, switched from your avatar
See more+

Chat and calls work between people on Iris. Messages are encrypted on your device before they reach Iris’s relay, and calls are encrypted end to end between the people in them; the relay passes them on without being able to read them. If a contact’s key changes, Iris locks that conversation until you verify.

Securitymodel · disclosure

Security model

A factual account of what Iris protects, what it doesn’t, where FluidPrism’s servers sit, and how to report a vulnerability.
  • When mail is end-to-end encrypted, and when it isn’t
  • What FluidPrism’s servers and Cloudflare can see
  • What has and hasn’t been independently reviewed
  • Reporting a vulnerability: [email protected]
See more+

The full model is published at iris.fluidprism.com/security, with a machine-readable contact in security.txt. Iris is in beta: an independent review of the cryptography is planned before launch, and the security page will say when it has happened and what it covered.

Frequently asked questions.

Quick answers. For the detail, see the guides above.
What is Iris and how does it work?

Iris is a mail app that works with the Gmail or Outlook account you already have. It encrypts messages on your device with your recipient’s key, so what your provider stores is ciphertext, and only your recipient’s devices can open it. It also checks drafts for card numbers and IDs, and warns you when a contact’s key changes.

Do I need a new email address?

No. You keep your address, your contacts and your history. People who aren’t on Iris still receive your mail as normal, signed so they can tell it’s from you.

Can Google, Microsoft or FluidPrism read my mail?

Mail that Iris end-to-end encrypts is sealed on your device and stored as ciphertext, so they can’t read it. Mail to people who aren’t on Iris travels as normal email over TLS. The lock next to each message shows which applies, and the security model sets out the exact conditions.

Which email providers and devices are supported?

Gmail and Google Workspace, Outlook.com, Hotmail and Microsoft 365, in current desktop browsers and on Android and iPhone. On a phone you can add Iris to your home screen.

What happens if I lose my laptop or phone?

Remove the lost device in Settings, then set up a new one with your passkey or your encrypted Drive backup and recovery code. See Keys, devices and recovery above.

Why does Google say Iris isn’t verified?

Iris is in beta and Google’s security review of the app is still in progress. Until it completes, sign-in shows a warning screen and the number of Gmail users is limited. Choose Advanced, then continue to Iris.

Does the leak check send my drafts anywhere?

No. It runs on your device and makes no network call. It reads the message and PDF, Word and Excel attachments locally, and doesn’t read images.

Where are my files stored?

In your own Google Drive, encrypted before upload. Mail stays in your Gmail or Outlook account. FluidPrism doesn’t store your mail or your files.

Has the cryptography been independently reviewed?

Not yet. An independent review is planned before launch, and the security page will say what it covered once it’s done.

How does pricing work?

Iris is free during the beta. Personal and Team plans follow at launch. Contact us if you’d like to try Iris with your team.

Questions the docs don’t answer? Ask us.
CONTACT →