Some things are
better left unread.

Share a password, API key or private note using a link that can only be opened once. No account. No nonsense.

Encrypted before it leaves your browser.

The encryption key stays in the link, not on our servers. Once opened, the encrypted message is deleted. Opening the link consumes it, even if decryption fails.

How does it work?

Type a secret, generate a link and send it privately. Your browser encrypts it using AES-GCM; only someone with the full link can decrypt it. Links expire automatically, even if they are never opened.

What can I share?

Passwords, recovery codes, API keys, credentials or sensitive text. For important credentials, use a proper password manager for ongoing storage.

Can anyone recover an opened secret?

No. The server removes the encrypted payload on its first successful retrieval. Don't use this for your only copy of something important.