Send a secret

Passwords, API keys, tokens — encrypted on this device before anything is sent.

Secret

0 Bmax 32 KB

Auto-send Send automatically as soon as the receiver opens the link

How it works

Your browser generates a random 256-bit key and puts it in the link after #. Browsers never send that part to the server.
The secret is encrypted locally with AES-256-GCM and relayed live over a WebSocket. Nothing is stored.
The receiver decrypts locally and sends back a signed confirmation.
The link works once, for 5 minutes. Anyone holding the full link can read the secret — share it over a channel you trust.

Waiting for receiver

Share this link

Keep this tab open. The secret stays on your device until the receiver connects and you press send.

Expires in 5:00

Receiver connected

The receiver proved they hold the link key. The secret will be encrypted now and sent once.

Expires in 5:00

Encrypted and sent

Waiting for the receiver's signed acknowledgment of successful decryption.

Connecting…

Keep this tab open. The sender will send the secret shortly.

Transfer completed

Decrypted on this device only. Copied text may remain in your clipboard.