Share secrets
that self-destruct
Send passwords, tokens, and sensitive messages with real security. The link works once — after that, it's gone for good.
How it works
Write the secret
The content is encrypted right in your browser before anything is sent. Not even we can read what you type.
Get the link
The decryption key lives in the URL's #hash fragment — browsers never transmit that part to the server.
The link self-destructs
On first read, the secret is decrypted and permanently deleted. Later visits return a 404.
Built for real privacy
Client-side encryption
client-sideThe secret is encrypted with AES-256 directly in your browser. The server only ever receives ciphertext — never the plaintext.
Key in the URL fragment
zero-knowledgeThe decryption key lives in the URL's #hash. Browsers never send that part in HTTP requests — it's invisible to the server.
Guaranteed destruction
one-readAfter the first read, the record is permanently deleted. No backups, no snapshots, no copies. Later access returns a 404.
Automatic expiration
ttl-24hUnread secrets automatically expire after 24 hours and are purged from the database — no action required.
Anti-bot protection
turnstileEvery secret creation passes through Cloudflare Turnstile verification, no annoying captchas, to block abusive automation.
No tracking
privacyNo tracking cookies, no third-party analytics. We don't know who you are, what you shared, or with whom.