Share a secret that self-destructs after one view. Encrypted in your browser with AES-256-GCM - the server never sees your plaintext.
#. It is never transmitted to our server. Even if someone accessed our database, they would only find ciphertext they cannot decrypt.A one-time secret is a piece of sensitive information shared via a link that self-destructs the moment it is opened. This tool encrypts your secret in your browser using AES-256-GCM, stores only the ciphertext on the server, and deletes it the instant it is retrieved. The decryption key is embedded in the URL fragment (after the #) - fragments are never sent to the server by browser design, so even we cannot decrypt what we store.
Email and Slack messages persist indefinitely - a password sent over Slack in 2019 may still be in someone's search index today. A one-time link prevents this. It is ideal for sharing temporary credentials, database passwords, SSH keys, or any secret that should not live in a message thread. Once the recipient reads it, it is gone.
Zero-knowledge means the server never has access to your plaintext. The encryption key is generated in your browser and travels only via the URL fragment - the #key=... portion. Browsers never include fragments in HTTP requests, so the server receives and stores only encrypted bytes it cannot read. This is the same model used by tools like Bitwarden Send.
This tool protects against the secret being exposed via a server breach or database leak. It does not protect against: the recipient's machine being compromised, the link itself being intercepted before it is opened, or someone standing over the recipient's shoulder. For truly sensitive operations, use a proper secrets management system. Maximum secret size is approximately 64 KB.