Our Encryption Algorithms & Services: Welcome.ink

Welcome.ink is a sub-service of Creaddinscart, providing encrypted redirect services. This document is a dedicated deep-dive into every encryption algorithm we support and every service we offer. If you want to understand exactly what happens to your link when you generate a redirect, this is the place. ---

Part 1: Our 8 Slug Algorithms

The "slug" is the obfuscated portion of your redirect URL—the string that replaces your original link. We support eight algorithms, each with distinct properties, strengths, and ideal use cases. Below is a complete breakdown.

1. Random

What it is: A purely random string generated without any deterministic relationship to the input URL. Each generation produces a completely unpredictable result. How it works: The system uses a cryptographically seeded random number generator to produce a string of variable length. There is no hash function involved. There is no way to reverse-engineer the original URL from the slug alone. Strengths:

Maximum unpredictability.

No patterns, no structure, no clues.

Impossible to correlate two slugs from the same destination.

Weaknesses:

No determinism—the same input never produces the same output.

Cannot be verified without a lookup table.

Best for: Situations where unpredictability matters more than verifiability. One-off links. Links where you want zero traceability between the slug and the destination. ---

2. MD5

What it is: A widely known cryptographic hash function that produces a 128-bit (32-character hexadecimal) output. How it works: The input URL is hashed using the MD5 algorithm. The resulting hash becomes the slug. MD5 is fast and deterministic—the same input always produces the same output. Strengths:

Fast and computationally cheap.

Widely recognized and understood.

Deterministic—easy to verify.

Weaknesses:

Not cryptographically secure. MD5 has known collision vulnerabilities.

Not recommended for security-critical applications.

Best for: Casual obfuscation. Situations where speed matters more than security. Legacy compatibility. ---

3. SHA-256

What it is: A member of the SHA-2 family, producing a 256-bit (64-character hexadecimal) output. One of the most widely used secure hash functions in the world. How it works: The input URL is hashed using SHA-256. The resulting hash becomes the slug. Deterministic and collision-resistant under normal circumstances. Strengths:

Strong cryptographic security.

Widely standardized and trusted.

Deterministic—same input, same output.

Good balance of speed and security.

Weaknesses:

Longer slug than MD5.

Slightly slower than MD5 (though negligible in practice).

Best for: A reliable default. Most use cases where you want strong security without excessive cost. The "safe choice." ---

4. SHA-512

What it is: A member of the SHA-2 family, producing a 512-bit (128-character hexadecimal) output. Stronger than SHA-256 but with a longer output. How it works: The input URL is hashed using SHA-512. The resulting hash becomes the slug. Deterministic and highly collision-resistant. Strengths:

Very strong cryptographic security.

Extremely low collision probability.

Deterministic.

Weaknesses:

Longest slug among the SHA family.

Higher computational cost than SHA-256.

Overkill for most non-adversarial use cases.

Best for: Maximum hash strength. Situations where you want the strongest possible SHA-family guarantee and do not mind the longer URL. ---

5. HMAC

What it is: Hash-based Message Authentication Code. A keyed hash function that combines a secret key with the input URL. How it works: The input URL is hashed using HMAC with a secret key. The resulting code becomes the slug. Only someone with the key can verify or reproduce the slug. Strengths:

Keyed—adds a layer of secrecy beyond the hash itself.

Verifiable only by someone with the key.

Strong against tampering and forgery.

Weaknesses:

Requires key management.

Not reversible without the key.

More complex to set up than plain hashes.

Best for: Situations where you want the slug to be verifiable only by you or your system. Authenticated redirects. Scenarios where a shared secret is practical. ---

6. Base64

What it is: Not a hash, but an encoding scheme that represents binary data as ASCII text. Produces a readable, reversible string. How it works: The input URL is encoded using Base64. The resulting string becomes the slug. Unlike hashes, Base64 is fully reversible—anyone can decode it. Strengths:

Readable and predictable format.

Reversible—easy to decode if needed.

Fast and simple.

Weaknesses:

Not secure. Anyone can decode it.

Provides obfuscation, not encryption.

Best for: Aesthetic purposes. Situations where you want a clean, readable slug without security concerns. Temporary links where reversibility is useful. ---

7. UUID

What it is: Universally Unique Identifier. A standardized 128-bit format used to uniquely identify information in computer systems. How it works: A UUID is generated (typically version 4, random-based) and used as the slug. The UUID has no relationship to the input URL. Strengths:

Globally unique.

Standardized format (8-4-4-4-12 hexadecimal characters).

Widely supported and recognized.

Weaknesses:

No relationship to the input—requires a lookup table.

Not deterministic in the usual sense.

Predictable structure.

Best for: Tracking and uniqueness. Situations where you need a standardized identifier format. Database-friendly slugs. ---

8. BLAKE2b

What it is: A modern cryptographic hash function designed as a faster, more secure alternative to MD5 and SHA-2. Produces variable-length output, typically 512 bits. How it works: The input URL is hashed using BLAKE2b. The resulting hash becomes the slug. Deterministic, fast, and cryptographically strong. Strengths:

Faster than SHA-2 with comparable or better security.

Strong collision resistance.

Modern design—no known practical vulnerabilities.

Deterministic.

Weaknesses:

Less widely recognized than SHA-2.

Not as universally supported in legacy systems.

Best for: Security-conscious users who want modern cryptography. High-performance applications. A strong alternative to SHA-256 or SHA-512. ---

Part 2: Our 4 Enhancements

Enhancements modify the visual and structural properties of the slug. They do not change the underlying algorithm; they change how the result looks and behaves.

1. Mixed Case

Alternates between uppercase and lowercase letters. Makes the slug harder to read at a glance and harder to dictate verbally. Effective against casual shoulder-surfing.

2. Symbols

Inserts special characters (e.g., !, @, #, $) at intervals. Breaks up patterns and makes the slug less predictable. Can interfere with some automated parsing systems.

3. Underscore

Adds underscores (_) at regular intervals. A subtle visual modification that can improve readability or aesthetics. Common in URL-friendly slugs.

4. Split

Divides the slug into segments (e.g., with hyphens or slashes). Makes long slugs easier to parse, copy, and share. Useful for very long SHA-512 or BLAKE2b outputs. Combining Enhancements: You can combine any number of enhancements. For example, a SHA-256 slug with Mixed Case and Symbols. The result is both cryptographically strong and visually obfuscated. ---

Part 3: Our 4 Protection Providers

Protection providers add a human-verification step before the redirect is followed. This is the gate within the gate.

1. None

No protection. The redirect happens immediately. Good for low-risk links or when you trust your audience completely.

2. Math Question

A simple arithmetic question (e.g., "What is 7 + 3?"). Easy for humans, difficult for bots. A lightweight barrier with minimal friction.

3. Cloudflare Turnstile

A modern, privacy-friendly CAPTCHA alternative. Invisible to most users, effective against bots. Does not require user interaction in most cases.

4. Google reCAPTCHA

The classic CAPTCHA. Widely recognized, widely supported. A strong barrier against automated access. Can be configured with your own keys. Bring Your Own Keys: For Turnstile and reCAPTCHA, you can bring your own API keys. These are stored with AES-256 encryption, ensuring that your credentials remain secure. ---

Part 4: Our Services

Beyond algorithms and enhancements, Welcome.ink offers a set of core services that define how you interact with the platform.

1. Encrypted Redirect Generation

The core service. Submit a domain, get an API key, generate encrypted redirects. Each redirect is a protected URL that users must pass through before reaching the final destination.

2. Token-Based Cost System

Every generation costs tokens. The cost depends on the algorithm and protection you choose. The dashboard shows you the cost before you generate. Tokens are allocated by the admin upon approval.

3. Free Regeneration

Once you have generated a link, you can regenerate it with a new algorithm or enhancement for free. No tokens are consumed. Experiment freely.

4. Dashboard Access

Sign in with your API key to access your control panel. Manage your domain, check your token balance, generate links, and view your history.

5. API Access

Your API key gives you programmatic access to the redirect generation system. Integrate Welcome.ink into your own applications, bots, or workflows.

6. Community Support

Join our QQ or Discord. @mention the admin. Get help, request features, report issues. We are a community-driven service.

7. Custom Domain Support

Submit a domain request. Once approved, your domain becomes the public-facing identifier for your redirects.

8. AES-256 Key Storage

For users who bring their own Turnstile or reCAPTCHA keys, we store them with AES-256 encryption. Your credentials remain secure. ---

Part 5: How It All Works Together

When you generate a redirect, you make a series of choices:

Choose an algorithm — Random, MD5, SHA-256, SHA-512, HMAC, Base64, UUID, or BLAKE2b.

Choose enhancements — Mixed Case, Symbols, Underscore, Split, or none.

Choose a protection provider — None, Math Question, Cloudflare Turnstile, or Google reCAPTCHA.

See the cost — The dashboard shows you the token cost before you generate.

Generate — Your encrypted redirect is created.

Share — The world sees a Welcome.ink URL. Only the right people get through.

If you want to change anything, regenerate for free. No tokens consumed. No penalties. ---

Conclusion

Welcome.ink is an encrypted redirect service. We offer eight slug algorithms, four enhancements, four protection providers, a transparent token system, free regeneration, and a suite of supporting services. We are a sub-service of Creaddinscart. We are Welcome.ink · Admin · shit.pub. We are a small, admin-mediated, community-driven tool for people who understand that a URL is not just an address—it is a gate. Welcome.ink is the gate.