All apps
Mask

Prove what you are. Never who you are.

Verify your credential once, then speak under a pseudonym with badges anyone can check.

"Two of us for thirty-eight patients. If I sign my name, I lose my job. If I don't, nobody believes me."

Nurse_7 · eleven years on medical wards

Her proof, sealed

CHECK Registered nurseCHECK Public hospitalCHECK Nigeria

The document is checked once, turned into a zero-knowledge proof, then deleted. Mask keeps nothing to hand over.

Step 1 of 2 · Your mask

Pick a name and what to prove

Never your initials, birth year or ward number.

Registered nurseFrom your licence, checked against the public register
Works in a public hospitalFrom a staff ID or payslip. Proves the type, not which one.
In this country: NigeriaCountry only. Never city or state.
10+ years registeredA range, not your registration date
Which hospitalNot offered. Too few nurses per hospital to stay hidden.

Step 2 of 2 · Verify once

Show your documents. Then they're gone.

Making your proof

Verifying, then forgetting

    Proof ready

    Nurse_7
    proof zk-7f3a…c91e · issued 10 Oct 2026

    Sealed and proven

    Deleted, with receipt

    Licence photo, staff ID photo, licence number, the register's reply.

    receipt d-21b8…04aa · 10 Oct 2026 21:14 · demo

    Mask keeps no copy. Even if Mask is hacked or ordered to hand over records, there is no document to hand over.

    New post

    ward_corridor.jpg
    has location data

    Threat model

    Could someone work out it's you?

    Re-identification riskHigh

    An estimate, not a guarantee. The biggest risks are details only a few people know.

    01File metadata

    ward_corridor.jpg carries GPS location, phone model and the time it was taken.
    Strip everything, keep the picture

    02Details and writing style

    A model reads your post the way a suspicious manager would.

    03Timing

    Posting right after a night shift links the post to the rota.

    04Network and device

    Posts leave through a relay, so your IP is never stored. Don't post from hospital wifi or a work phone.
    Reminder before each poston

    Your approval

    Needs your seal: publish this post

    Public page

    06:40
    Wednesday 14 October
    MASKnow
    A verified health reporter wants to talk.

    Ama Kusi, The Lantern Desk. Press badge checked. She can't see who you are. Reply through a hidden relay?

    MASK2h ago
    A commenter guessed a hospital name. I hid the comment.

    Hidden while you and a moderator review it. Your post is unchanged.

    While you were away

    Sat 10 Oct, 21:20 to Wed 14 Oct, 06:40

    81hours watching
    18.4kreaders
    1request blocked
    RESULT3 journalists asked. Nobody learned who you are.2,310 readers checked your badge. Every check passed.

    Outcome

    What one verified voice did

    Readers and badge checks

    41kreaders in 14 days
    4outlets cited it
    1official review

    Milestones

    GRAND MISSION · 3 YEARS

    The people who know can always speak.

    1. Year 1: nurses, teachers and engineers publishing with verified badges, plus a newsroom inbox that 200 outlets use.
    2. Year 2: credential issuers (registers, unions, universities) sign proofs directly, so no document ever needs a photo.
    3. Year 3: "verified anonymous" becomes a normal standard for sources, reviews and whistleblowing, in any language, on any platform that accepts the proof.

    Control

    Nothing happens without you

    Every post needs my tapMask never posts, edits or replies for you.
    Hold requests from new or unverified accountsAccounts under 30 days, or asking identifying questions, wait in a separate folder.
    Random delay on every post6 to 48 hours, chosen by your phone.
    Writing-style check before postingFlags phrases that point at you.

    Emergency

    Revoke your proof and delete the pseudonym. Badges on old posts will show "revoked by owner". This can't be undone.

    Activity log