Skip to content
All tools

One-Time Secret

Share a password or note through a link that destroys itself after a single view. The text is encrypted in your browser and the key lives in the URL fragment, which browsers never send to a server.

Why we cannot read it: your browser generates an AES-256 key, encrypts the text, and puts the key in the part of the URL after the #. Browsers never send that part to a server. We store ciphertext and an IV, and delete both the moment the link is opened.