Secret message
A one-time link with an encrypted message that self-destructs.
A password, a door code, anything sensitive. Up to 10,000 characters.
The message is encrypted in your browser and the key travels only in the part of the link after the hash; the server gets ciphertext it cannot read.
- Runs on our server
- Free, no sign-up
More about Secret message
How to send a secret message
Write the message, pick how long the link should live, and create it. Whoever you send the link to can view the message exactly once: the first read destroys it forever. Perfect for passwords, access codes and anything that should not live in a chat history or inbox for years.
The message is encrypted right in your browser (AES-256-GCM) and the decryption key travels only in the part of the link after the hash, which browsers never send to any server. Our server stores ciphertext it cannot read, and even that is deleted on the first read, or when the link expires.
Frequently asked questions
Can the message really be read only once?
Yes. The server hands out the ciphertext once and deletes it in the same operation; a second visit gets only a note that the message no longer exists.
What about link previews in chat apps?
Previews will not destroy the message. Opening the page does not retrieve anything; the message is fetched only when the recipient clicks the button, and bots do not click it.
Can you read my message?
No. The key is generated in your browser and never reaches the server; we store only ciphertext. Without the key from the link it is unreadable even to us.
How long does the link live?
Your choice: a day, a week or a month. An unread message deletes itself when the link expires.
What if I open the link myself?
Just opening the page does not destroy the message. Clicking "Show the message" does, so send the link straight on and resist checking it.