Tool
A password sent by email or chat stays there forever — in the inbox, the history, the backups. This link works differently: the secret is encrypted in your browser, can be read exactly once, and disappears for good after that. We cannot peek at it either.
AES-256 encryption happens in your browser. The server stores only the ciphertext.
1
The secret is encrypted with AES-256 in your browser. Only the ciphertext reaches the server — the key stays in the link after the # sign, which browsers never send.
2
Share the link over any channel. An unread secret expires automatically after the chosen time.
3
The first read permanently destroys the secret on the server. Opening the link again only shows that the secret is gone.
4
You can email the link to the recipient straight from the tool and get a read notification. An extra passphrase (shared e.g. by SMS) makes the link alone insufficient — it is checked before the read, so a typo never destroys the secret, while a series of wrong attempts burns it and alerts the sender.
No. AES-256 encryption happens in the sender's browser and the decryption key travels in the link after the # sign, which browsers never send to servers. We store only ciphertext. The one exception: when you request email delivery, the full link transits our server transiently to compose the message — we do not store it, and the queued email is deleted the moment the secret is read.
Nothing bad. The passphrase is verified before the read, so a typo never destroys the secret. Only 10 wrong attempts permanently destroy it (without revealing the content) and — if the sender left an address — send them a warning.
Until the first read or until expiry: 1 hour, 24 hours, 3 days or 7 days. Expired and read secrets are permanently deleted from the database.
An emailed password stays in the inbox, history and backups forever. Here the link works exactly once, the secret disappears after the read, you can get a read notification, and the passphrase makes an intercepted link useless on its own.
The only personal data stored is the optional email address for the read notification — used solely for that one message and covered by the right to erasure (GDPR). The delivery recipient's address is not stored with the secret.