Send a secret. Let it vanish.
Paste the password, key or message here. You get a link that works a set number of times or until the clock runs out. After that the secret is gone – for good.
Your link is ready
Send the link to the recipient. The part after # is the decryption key, it is never sent to the server, so make sure to send the whole link.
Don’t open the link yourself to check it. Every press of “Reveal the secret” counts as a view.
How it works
Write
Write the secret, attach files if you like, and choose how many views and hours it may live.
Share
Your browser encrypts the content and you get a unique link. Send it to the recipient, ideally through a different channel than the rest of the details.
Forget
When the views are used up or the time runs out, everything is deleted from the database. Nobody can retrieve it again, not even us.
Questions and answers
What happens once the secret has been viewed the agreed number of times?
It is deleted from the database immediately. There is no copy, no trash bin and no backup of the content.
Can you read my secrets?
No. Text and files are encrypted in your browser with AES-256-GCM before they are sent. The key sits in the link after the # sign, and browsers never send that part to the server. The server only stores encrypted data, which is useless without the key.
Why send the username and password through two channels?
Send the username by e-mail, for instance, and the password via a link from here. An attacker would then need access to both channels – and the link dies once it has been used.
Does it count as a view if I open the link myself?
The page first shows a button, so a link preview or an accidental click doesn’t consume a view. Pressing “Reveal the secret” does count – no matter who presses it.
How much can I send?
Text up to 100 KB and up to 3 files of 10 MB each per secret. A secret can live for at most 720 hours (30 days).
What if the link is incomplete?
Without the part after # the content cannot be decrypted. The page detects this before a view is used, so just ask the sender to send the whole link again.