diff --git a/crypto/js/src/main/scala/org/http4s/crypto/Priority.scala b/crypto/js/src/main/scala/org/http4s/crypto/Priority.scala
index 5b7a143..be198b1 100644
--- a/crypto/js/src/main/scala/org/http4s/crypto/Priority.scala
+++ b/crypto/js/src/main/scala/org/http4s/crypto/Priority.scala
@@ -26,7 +26,7 @@ package org.http4s.crypto
  * This type can be useful for problems where multiple algorithms can be used, depending on the
  * type classes available.
  */
-sealed trait Priority[+P, +F] {
+private[http4s] sealed trait Priority[+P, +F] {
 
   import Priority.{Fallback, Preferred}
 
diff --git a/crypto/js/src/main/scala/org/http4s/crypto/SecurityException.scala b/crypto/js/src/main/scala/org/http4s/crypto/SecurityException.scala
index 39e829f..8583264 100644
--- a/crypto/js/src/main/scala/org/http4s/crypto/SecurityException.scala
+++ b/crypto/js/src/main/scala/org/http4s/crypto/SecurityException.scala
@@ -16,11 +16,11 @@
 
 package org.http4s.crypto
 
-class GeneralSecurityException(message: String = null, cause: Throwable = null)
+private[http4s] class GeneralSecurityException(message: String = null, cause: Throwable = null)
     extends Exception(message, cause)
 
-class KeyException(message: String = null, cause: Throwable = null)
+private[http4s] class KeyException(message: String = null, cause: Throwable = null)
     extends GeneralSecurityException(message, cause)
 
-class InvalidKeyException(message: String = null, cause: Throwable = null)
+private[http4s] class InvalidKeyException(message: String = null, cause: Throwable = null)
     extends KeyException(message, cause)