Send a secret
Passwords, API keys, tokens — encrypted on this device before anything is sent.
0 Bmax 32 KB
How it works
- Your browser generates a random 256-bit key and puts it in the link after
#. Browsers never send that part to the server. - The secret is encrypted locally with AES-256-GCM and relayed live over a WebSocket. Nothing is stored.
- The receiver decrypts locally and sends back a signed confirmation.
- The link works once, for 5 minutes. Anyone holding the full link can read the secret — share it over a channel you trust.
Waiting for receiver
Share this link
Keep this tab open. The secret stays on your device until the receiver connects and you press send.
Expires in 5:00
Receiver connected
Ready to send
The receiver proved they hold the link key. The secret will be encrypted now and sent once.
Expires in 5:00
Encrypted and sent
Waiting for confirmation…
Waiting for the receiver's signed acknowledgment of successful decryption.
Connecting…
Incoming secret
Keep this tab open. The sender will send the secret shortly.
Transfer completed
Your secret
Decrypted on this device only. Copied text may remain in your clipboard.
Create new transfer