Create the link
Enter your text, choose an expiry time and add a password if needed. Your browser encrypts the text with AES-256-GCM before uploading it to the server.
How it works
How does one-time secret sharing work?
Your browser encrypts the text before uploading it. The recipient uses the complete link and, if required, a password to reveal the content once.
Create, share and view a secret link
Share access
Copy the complete link. Its decryption key appears after the # symbol and is not sent in HTTP requests to the server. Send the password separately if you set one.
Reveal the content
The recipient opens the page, enters any required password and confirms viewing. The server deletes the secret, then the recipient’s browser decrypts it. The link cannot be used again.
Frequently asked questions
When does the link expire?
Choose 1 to 12 hours in one-hour increments, or 1 to 7 days in 24-hour increments. The link becomes invalid when the secret is first revealed or at the selected expiry time, whichever comes first. The server checks the expiry.
Does opening the link delete the secret?
No. Opening the link displays a confirmation page. Only clicking “Reveal secret” consumes the link, after any required password is verified. Ordinary link previews do not consume the secret.
Who can read the secret?
Anyone who has the complete link and, if one was set, the password. The database does not contain the original text, the decryption key or the password.
What are the password requirements?
A password is optional. It must contain 8 to 25 characters, including at least one lowercase letter, one uppercase letter, one number and one special character. A space does not count as a special character. Send the password through a separate channel from the link.
What happens if the password is incorrect?
The secret remains available. After five incorrect attempts, access to the link is blocked for 15 minutes. The original expiry time still applies.
Can two people read the same link?
Only one request can retrieve the secret. Access verification and deletion happen in one transaction, even if several people try to reveal the content at the same time.
Can I recover a secret or a lost password?
No. There is no history or recovery option. Keep the link until you have sent it. If the link is incomplete, expired or already used, the sender must create a new secret.
What if the connection is interrupted?
The server deletes the secret before sending the response. If the connection drops at that point, the link may be consumed without the text being displayed. Ask the sender for a new link.
Can the recipient keep the text?
Yes. One-time access limits retrieval through the link, but the recipient can copy the content or take a screenshot. “Hide and finish” removes the text from the page without deleting copies already made.