Your link is ready
Send it to the recipient. The secret can be opened only once.
The link is shown only in the tab where it was created. You can still destroy the secret from here.
For the same secret, one link per recipient. The current link keeps working, but you won't be able to destroy it from here.
Sent it to the wrong person? Destroy the secret and the link stops working immediately.
Tip: for really sensitive data, add a password to the link and share it another way, for example by voice. Then intercepting one message gives nothing away.
The link has expired
Nobody opened the link in time. The data is deleted from the server and the link no longer works.
Secret destroyed
You destroyed the secret. The data is deleted from the server and the link no longer works.
Share Passwords Securely with One-Time Links
Your secret is encrypted right in your browser. The recipient opens the link once, and then the data is deleted from the server.
- No sign-up
- AES-256 encryption on your device
- Open source
How it works
-
Paste your secret
A password, an API key, login details or a file. Everything is encrypted in your browser before it is sent.
-
Send the link
Via Telegram, WhatsApp, Signal, Slack, email or any other messenger. The chat keeps only the link, not the password itself.
-
The link burns
Once viewed, the data is deleted from the server. The link cannot be opened a second time.
Why we can't read your secret
The decryption key is inside the link, after the # sign. Browsers never send that part of the address to the server, so only you and the recipient can see it.
Goes to the server. The address of the encrypted data: without the key it is just random bytes.
Stays with you. The decryption key. Browsers never send anything after the # to the server.
Encrypted in the browser
The browser's built-in Web Crypto API and AES-256-GCM. No third-party libraries.
Open source
All the code is published on GitHub. Anyone can check how the encryption works.
Nothing extra
No sign-up, no third-party scripts, no trackers. That's why there is no cookie banner either.
FAQ
Didn't find an answer? Open an issue on GitHub.
No. The secret is encrypted in your browser before it is sent. The key lives in the link after the # sign, and that part of the address never reaches the server.
Nothing happens. The secret appears only after someone clicks “Show secret”, and preview bots don't click buttons.
The secret deletes itself when the storage time you chose runs out.
Yes. The page with your link has a “Destroy now” button. After that the link stops working.
No. Neither the sender nor the recipient needs an account.
