--- title: "Can You See Who Opened a One-Time Link? What 7 Tools Record" url: https://uselinkpilot.com/blog/can-you-see-who-opened-a-one-time-link description: "No tool can name the person. Here is what each one-time secret service records when a link is opened: OneTimeSecret, Password Pusher, Bitwarden Send, Yopass, PrivateBin, password.link and LinkPilot." lang: en --- Security (https://uselinkpilot.com/blog/category/security) # Can you see who opened a one-time secret link? No tool can name the person. Here is what each one-time secret service records when a link is opened: OneTimeSecret, Password Pusher, Bitwarden Send, Yopass, PrivateBin, password.link and LinkPilot. LinkPilot Team October 14, 2026 · About LinkPilot (https://uselinkpilot.com/about) Short answer: no tool can tell you who. A link does not carry an identity, and none of the services below ask the recipient to sign in. What a service can record is that the link was opened, when, and sometimes a hashed network address, a rough location and the browser that did it. The differences between tools are in how much of that they keep, who gets to see it, and whether you are told at the time. This post lists what each tool records, from its own documentation as of 14 October 2026, so you can choose the right one for the question you actually have: "did they get it?", "when?", or "who else did?". ## What a link open can and cannot prove When someone opens a one-time link (https://uselinkpilot.com/glossary#one-time-link), the server sees a request: a time, a network address, a browser string and, from the edge provider, a country and city guess. It does not see a name, an email address or a device owner. Even a tool that stores the raw address only tells you which network the request came from, which for mobile and office traffic is often a shared gateway. So the honest ceiling for any of these products is: the secret was opened at this time, from this kind of client, from roughly here. That is enough to answer "did my colleague receive the password before I rotate it?" and "was this opened before I even sent it?". It is not enough to accuse anyone. ## What each tool records | Tool | Can you see it was opened? | What is recorded | Who sees it | | --- | --- | --- | --- | | LinkPilot | Yes, on the secret's timeline | Event type (created, viewed, failed passphrase, burned, expired, revoked), timestamp, hashed IP with a daily salt, country and city from the edge when available, User-Agent string | The workspace, on Pro | | Password Pusher | Yes, Pro audit log | Timestamps of each view ("viewed by recipient Jun 9, 15:07" in its example) | The sender, on Pro plans | | Bitwarden Send | View count only | A running count of accesses against the limit you set | The sender | | Yopass | Business licence: read receipts | A notification by email or webhook when the secret is opened | The sender | | password.link | Yes, notifications | Events when the link is created, viewed or expires, sent by email, Slack or webhook | The sender | | SnapPwd | Optional email | A notification when the secret is accessed, if you gave an address | The sender | | OneTimeSecret | Secret state | Whether the secret has been received or burned; no viewer details in the documentation | The sender | | PrivateBin, 1time.io, OncePad | No | Nothing about the reader, by design; PrivateBin notes a server admin's access logs could be demanded by authorities | Nobody | Details are from each vendor's site on the date above and change over time; check the project before relying on a column. ## Why LinkPilot keeps a timeline, and why it hashes the address LinkPilot is built for people sharing credentials on behalf of a business, where "did they open it?" is a compliance question as much as a curiosity. Every secret has a timeline of events: created, viewed, failed passphrase attempt, burned, expired and revoked. Each event carries a timestamp, the country and city the edge reports, the browser's User-Agent string, and a hash of the network address rather than the address itself. The hash uses SHA-256 with a salt that rotates daily and is truncated to 32 characters, so two opens on the same day from the same address match each other, but nobody can turn the record back into an IP, and tomorrow's records cannot be joined to today's. That trade is deliberate. A workspace owner gets enough to see that a secret was opened twice, from two countries, ten minutes apart, which is the pattern that means "rotate now". They do not get a surveillance record of recipients. Failed passphrase attempts are logged the same way, so a brute-force attempt shows up on the timeline too. The security architecture (https://uselinkpilot.com/security-architecture) page lists exactly what is and is not stored. The timeline is a Pro feature. On the free plan (https://uselinkpilot.com/glossary#free-plan) and the anonymous burn-after-read tool (https://uselinkpilot.com/tools/burn-after-read-secret) the secret still burns on the first reveal and a second visitor sees "already viewed and destroyed", which answers the most common question on its own: if you see that message, it was opened. ## What the record is good for - **Confirming delivery before you rotate.** You sent a database password on Friday; on Monday the timeline shows it was opened on Friday from the recipient's city. You can rotate on schedule rather than guessing. - **Catching an early open.** The secret was created at 09:00 and opened at 09:00:04 from a data-centre address with a bot-like browser string, before the recipient could possibly have clicked. That is a link preview (https://uselinkpilot.com/glossary#link-preview) or a scanner, and it is why LinkPilot answers previews with metadata only and never counts them as a view. See link scanners and one-time secrets (https://uselinkpilot.com/blog/link-scanners-and-one-time-secrets). - **Spotting a forward.** Two opens are impossible on a one-time link, but a secret that expired unopened while the recipient swears they clicked tells you the link went somewhere else first. - **Incident write-ups.** An auditor asking "who had access to this credential and when" gets a dated record instead of a Slack search. ## What it is not good for - **Naming a person.** See above. A hashed address and a browser string are not an identity, and LinkPilot's hashing is designed so they cannot become one. - **Proving the recipient read it.** Opened is not read. The browser fetched and decrypted it; what happened next is outside any tool's view. - **Replacing rotation.** If a secret was opened by the wrong party, the only safe response is to change the credential. The timeline tells you to do it; it cannot undo the view. ## How to choose on this one question - You need a record (https://uselinkpilot.com/glossary#a-record) you can show an auditor: LinkPilot Pro (timeline with hashed address and location) or Password Pusher Pro (timestamps). - You want to be told the moment it is opened: password.link, SnapPwd, or Yopass with the business licence. - You only need a count: Bitwarden Send. - You want nothing recorded about the reader, on principle: PrivateBin, 1time.io or OncePad, and accept that "did they get it?" has to be asked in person. The wider comparison, including encryption models, files and self-hosting, is in 10 OneTimeSecret alternatives compared (https://uselinkpilot.com/blog/best-onetimesecret-alternatives). For the step-by-step of what happens between create and burn, read how one-time secret links work (https://uselinkpilot.com/blog/how-one-time-secret-links-work). ## References 1. Password Pusher product page (audit log example, Pro pricing). https://eu.pwpush.com/ 2. Bitwarden Send lifespan (view count). https://bitwarden.com/help/send-lifespan/ 3. Yopass (business licence read receipts). https://yopass.se/ 4. password.link (notifications). https://password.link/ 5. SnapPwd (notification email). https://snappwd.io/ 6. OneTimeSecret documentation. https://docs.onetimesecret.com/ 7. PrivateBin (access logs note). https://privatebin.info/ 8. 1time.io. https://1time.io/ 9. OncePad. https://oncepad.com/ 10. LinkPilot security architecture (what is logged per reveal). https://uselinkpilot.com/security-architecture ## Tools mentioned in this article Burn-After-Read Secret Share a message that destroys itself after one view. https://uselinkpilot.com/tools/burn-after-read-secret Free Secret Link Generator Send end-to-end encrypted, self-destructing messages. https://uselinkpilot.com/tools/free-secret-link-generator ## Frequently asked questions ### Can a one-time link tell me who opened it? ### Which one-time secret tools notify you when the link is opened? ### Does LinkPilot store the IP address of whoever opened a secret? ### What should I do if the wrong person opened my one-time link? ## LinkPilot sends a secret link that is gone after it is opened. Encrypted in your browser, revealed once, then destroyed. No account needed. Create a secret link (https://uselinkpilot.com/tools/free-secret-link-generator) ## Read next Security ### OneTimeSecret vs Privnote vs Password Pusher: Which Should You Use? A three-way comparison of the most popular secret-sharing tools — encryption, expiry, revocation, self-hosting, and where each one genuinely wins. https://uselinkpilot.com/blog/onetimesecret-vs-privnote-vs-password-pusher Security ### Is Privnote Safe? 3 Risks Before You Paste a Password Safe enough for a casual note, not for credentials. The clone-site phishing Krebs documented, unverifiable encryption, and no way to revoke - plus fixes. https://uselinkpilot.com/blog/is-privnote-safe Security ### 7 Best Privnote Alternatives in 2026 (Free & Self-Hosted) Clone-site phishing and closed-source crypto drive people off Privnote. 7 alternatives compared on encryption, revocation, audit logs and price. https://uselinkpilot.com/blog/best-privnote-alternatives ## Structured data ```json [ { "@context": "https://schema.org", "@type": "SoftwareApplication", "@id": "https://uselinkpilot.com/#software", "name": "LinkPilot", "applicationCategory": "BusinessApplication", "operatingSystem": "Web", "description": "LinkPilot is a secure link management platform for creating branded short links, tracking engagement, and sharing secrets with expiring, protected, self-destructing links.", "url": "https://uselinkpilot.com", "offers": [ { "@type": "Offer", "name": "Free", "price": "0", "priceCurrency": "USD", "url": "https://uselinkpilot.com/pricing" }, { "@type": "Offer", "name": "Pro", "price": "29", "priceCurrency": "USD", "priceSpecification": { "@type": "UnitPriceSpecification", "price": "29", "priceCurrency": "USD", "billingDuration": "P1M" }, "url": "https://uselinkpilot.com/pricing" }, { "@type": "Offer", "name": "Agency", "price": "299", "priceCurrency": "USD", "priceSpecification": { "@type": "UnitPriceSpecification", "price": "299", "priceCurrency": "USD", "billingDuration": "P1M" }, "url": "https://uselinkpilot.com/pricing" }, { "@type": "Offer", "name": "Agency Plus", "price": "799", "priceCurrency": "USD", "priceSpecification": { "@type": "UnitPriceSpecification", "price": "799", "priceCurrency": "USD", "billingDuration": "P1M" }, "url": "https://uselinkpilot.com/pricing" }, { "@type": "Offer", "name": "Enterprise", "priceSpecification": { "@type": "PriceSpecification", "priceCurrency": "USD" }, "url": "https://uselinkpilot.com/pricing" } ] }, { "@context": "https://schema.org", "@type": "Organization", "@id": "https://uselinkpilot.com/#organization", "name": "LinkPilot", "alternateName": "LinkPilot by TetraCore", "url": "https://uselinkpilot.com", "contactPoint": { "@type": "ContactPoint", "contactType": "customer support", "email": "support@uselinkpilot.com", "url": "https://uselinkpilot.com/support" }, "parentOrganization": { "@type": "Organization", "@id": "https://tetracorehq.com/#organization", "name": "TetraCore", "url": "https://tetracorehq.com/" }, "logo": { "@type": "ImageObject", "url": "https://uselinkpilot.com/logo-512.png", "width": 512, "height": 512 }, "description": "LinkPilot is a secure link management platform for creating branded short links, tracking engagement, and sharing secrets with expiring, protected, self-destructing links.", "sameAs": [ "https://x.com/uselinkpilot", "https://www.linkedin.com/company/uselinkpilot", "https://facebook.com/uselinkpilot", "https://github.com/TetraCoreHQ/linkpilot-cli", "https://github.com/TetraCoreHQ/linkpilot-mcp", "https://www.npmjs.com/package/linkpilot", "https://www.npmjs.com/package/@uselinkpilot/sdk", "https://www.npmjs.com/package/@uselinkpilot/mcp", "https://chromewebstore.google.com/detail/linkpilot-short-links-and/mnmppadihpcncicldpkmgknhnjkondad" ] }, { "@context": "https://schema.org", "@type": "WebSite", "name": "LinkPilot", "url": "https://uselinkpilot.com", "potentialAction": { "@type": "SearchAction", "target": "https://uselinkpilot.com/blog?q={search_term_string}", "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://uselinkpilot.com/" }, { "@type": "ListItem", "position": 2, "name": "Blog", "item": "https://uselinkpilot.com/blog" }, { "@type": "ListItem", "position": 3, "name": "Can You See Who Opened a One-Time Secret Link? What Each Tool Records", "item": "https://uselinkpilot.com/blog/can-you-see-who-opened-a-one-time-link" } ] }, { "@context": "https://schema.org", "@type": "BlogPosting", "@id": "https://uselinkpilot.com/blog/can-you-see-who-opened-a-one-time-link#article", "headline": "Can You See Who Opened a One-Time Secret Link? What Each Tool Records", "description": "No tool can name the person. Here is what each one-time secret service records when a link is opened: OneTimeSecret, Password Pusher, Bitwarden Send, Yopass, PrivateBin, password.link and LinkPilot.", "datePublished": "2026-10-14", "dateModified": "2026-10-14", "image": "https://uselinkpilot.com/logo-512.png", "author": { "@type": "Organization", "name": "LinkPilot Team", "url": "https://uselinkpilot.com" }, "publisher": { "@type": "Organization", "name": "LinkPilot", "url": "https://uselinkpilot.com", "logo": { "@type": "ImageObject", "url": "https://uselinkpilot.com/logo-512.png", "width": 512, "height": 512 } }, "mainEntityOfPage": { "@type": "WebPage", "@id": "https://uselinkpilot.com/blog/can-you-see-who-opened-a-one-time-link" } }, { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [ { "@type": "Question", "name": "Can a one-time link tell me who opened it?", "acceptedAnswer": { "@type": "Answer", "text": "No tool can identify a person from a link open. What a service can record is that the link was opened, when, and sometimes a hashed network address, a coarse location and the browser string. Treat it as evidence of a view, not of an identity." } }, { "@type": "Question", "name": "Which one-time secret tools notify you when the link is opened?", "acceptedAnswer": { "@type": "Answer", "text": "password.link (email, Slack or webhook), SnapPwd (optional email), Yopass with the business licence (email or webhook) and Password Pusher Pro (audit log). LinkPilot records each reveal on the secret's timeline, visible to the workspace on Pro." } }, { "@type": "Question", "name": "Does LinkPilot store the IP address of whoever opened a secret?", "acceptedAnswer": { "@type": "Answer", "text": "No. It stores a SHA-256 hash of the address with a salt that changes daily, truncated to 32 characters, plus the country and city when the edge provides them and the browser's User-Agent string. The raw address is never written." } }, { "@type": "Question", "name": "What should I do if the wrong person opened my one-time link?", "acceptedAnswer": { "@type": "Answer", "text": "Rotate the credential immediately. The timeline tells you when it happened and roughly from where, which is enough to decide, but a link open is not proof of who. Then shorten expiry and send passphrases out of band next time." } } ] } ] ```