One-time secrets
Send a password, API key or private note through a link that works exactly once. It’s encrypted in your browser — we only ever hold ciphertext we can’t read.
Your one-time link
Only the status is stored — never the secret or its key. Anonymous links are remembered in this browser only.
Stop pasting passwords into chat
Messages sit in chat histories, email archives and backups for years. A one-time link keeps the secret out of all of them: once your recipient opens it, the encrypted copy on our server is erased, and the link becomes useless.
Can you read my secrets?
No. Encryption happens in your browser, and the key lives only in the part of the link after #, which browsers never transmit. The server only ever stores scrambled data. The code is open source — check assets/secret.js.
What if someone intercepts the link?
Whoever opens it first sees the secret — and the intended recipient will then see “already viewed”, so you’ll know. For sensitive secrets, add a password and share it through a different channel.
What happens after it expires?
The ciphertext is deleted within minutes of expiry, and the record of the link itself is removed after 30 days.
More tools