Skip to content

Instructions

Install, create, host, and view a Capsule.

This page gives the practical flow at a high level. The important idea is simple: the original file stays local, the encrypted Capsule can be hosted anywhere compatible, and the Viewer extension handles authorization before decrypting.

Extension Installation

Install the Share Capsules browser extension.

Creators and viewers use the extension because file selection, encryption, signing, authorization, and decryption need a trusted local boundary. The original source file and private signing material should not be uploaded to the Share Capsules website.

  1. Install the official Share Capsules Viewer extension from the Chrome Web Store.
  2. Open Share Capsules and sign in.
  3. Let the extension connect to your account when prompted.
Install from Chrome Web Store

Capsule Creation

Create the protected Capsule locally.

In Creator Studio, enter the public details and access rules. Optional rules can create Time Capsules, Limit Capsules, Trust Capsules, or a Capsule that combines those patterns. Then continue in the extension, choose the file, and save the Capsule into your local workspace.

  1. Enter a title, optional description, and any Time, Limit, or Trust rules.
  2. Choose a workspace folder when the extension asks for one.
  3. Save the recovery code separately if the extension shows one.
  4. Choose the source file and create the `.capsule` file.

Capsule Hosting

Upload the Capsule to your website or static file host.

Share Capsules does not need to host the encrypted file. Put the `.capsule` file at a permanent public HTTPS URL, then place a `<capsule-viewer>` tag on the page where protected content should appear.

Example markup

<capsule-viewer src="https://example.com/capsules/eclipse-photo.capsule">
  <fallback>
    <article class="rounded-2xl bg-white p-6 shadow-sm">
      <h2>Protected photo</h2>
      <p>Install or enable the Share Capsules Viewer to open this Capsule.</p>
      <a href="https://sharecapsules.com/viewer/install?return_to=https%3A%2F%2Fexample.com%2Fgallery%2F">
        Install the Viewer
      </a>
    </article>
  </fallback>

  <template>
    <article class="rounded-2xl bg-white p-6 shadow-sm">
      <h2>{{ title }}</h2>
      <p>{{ description }}</p>

      <content
        class="mt-4 h-80 w-full rounded-xl object-cover"
        style="background: #f8fafc;"
      ></content>
    </article>
  </template>

  <error>
    <article class="rounded-2xl border border-red-200 bg-red-50 p-6">
      <h2>Capsule unavailable</h2>
      <p>{{ error_message }}</p>
    </article>
  </error>
</capsule-viewer>

<fallback>

Public content shown before the extension opens the Capsule or when the Viewer is unavailable. It should include a link to the Viewer install page with only ordinary return navigation.

<template>

Your normal page layout. It can use your site's existing classes and replaces public metadata placeholders as text.

<content>

The protected viewing surface. The extension replaces this element with a secure iframe.

  • The Capsule URL should be public HTTPS.
  • The host should allow public download without sign-in, cookies, or private tokens.
  • If the Capsule is on a different origin, the host should allow public cross-origin reads.
  • Surrounding template markup uses your normal page CSS. Decrypted content stays inside the extension iframe.
  • The optional <error> section receives only safe messages, never tickets, keys, proofs, account identifiers, or technical secrets.
  • No-extension fallback links should point to https://sharecapsules.com/viewer/install. A return_to value may contain the public page URL, but never credentials, authorization codes, tokens, tickets, proofs, recovery material, or content keys.

Capsule Viewing

Viewers open Capsules through the extension.

When a viewer visits a page with protected content, the extension verifies the Capsule, explains the access requirements, asks Share Capsules for authorization, and decrypts locally only after the policy is satisfied.

  1. The viewer installs and connects the extension.
  2. The extension detects the Capsule on the page.
  3. The viewer approves the requested access check when needed.
  4. The extension decrypts and displays the content locally if authorized.

What viewers may see

Capsule opens

The time, limit, account, device, and trust policies are satisfied, so the extension decrypts locally.

Capsule locked by rule

A Time Capsule may be outside its date window, or a Limit Capsule may have reached a configured view limit.

Quick human challenge

A Trust Capsule may ask an otherwise eligible viewer to complete a short check before access is retried.

Blocked for automation risk

Recent high-risk usage patterns can keep access blocked even when a human challenge is attempted.

Confirm this change

This action may not be reversible.