---
title: "How to Share a Sensitive Message With a Revocable Link"
url: https://uselinkpilot.com/blog/how-to-share-a-sensitive-message-with-a-link-that-can-be-revoked
description: "Revocation ends access before expiry does. How a revocable link differs from an expiring one, how to send one, when to pull it, and what revoking cannot undo."
lang: en
---

Security (https://uselinkpilot.com/blog/category/security)

# How to share a sensitive message with a link that can be revoked

Revocation ends access before expiry does. How a revocable link differs from an expiring one, how to send one, when to pull it, and what revoking cannot undo.

LinkPilot Team (https://uselinkpilot.com/author/linkpilot-team) · The people who build and run LinkPilot at TetraCore, LLC October 26, 2026 · About LinkPilot (https://uselinkpilot.com/about)

You send a sensitive message and then something changes. The recipient's role changed, the deal fell through, you realise the address was wrong, or the window you set was too generous. An expiring link will die on schedule, but schedule is not what you need now. You need to end it.

To share a sensitive message with a link that can be revoked is to keep that control. This guide explains how revocation differs from expiry and one-time opens, how to send a revocable link, when to pull it, what revoking cannot undo, and the mistakes that make revocation arrive too late.

## Three controls, three different failures

| Control | What it does | The failure it covers | | --- | --- | --- | | Expiry | Destroys the secret at a set time | A link that nobody opened, forgotten in a thread | | One-time open | Destroys the secret the first time it is revealed | Copies lingering after the handoff is done | | Revocation | Destroys the secret now, on your decision | Circumstances changed before anyone opened it |

An expiring link protects you from your own forgetfulness. A one-time link protects you from copies. Revocation protects you from the thing you only learned after sending. A LinkPilot secret link (https://uselinkpilot.com/glossary#secret-link) has all three: it burns on first open, it expires at the deadline you set, and until one of those happens you can revoke it from the dashboard and the link returns a gone response from then on. The expiring links guide (https://uselinkpilot.com/blog/expiring-links-security) covers what expiry protects and what it does not; this guide is about the third control.

## What a revocable link cannot do

Revocation acts on the stored copy. It cannot reach:

- **A message already revealed.** The text is on the recipient's screen, in their clipboard, possibly in a screenshot.
- **The wrong recipient who already opened it.** Revoking afterwards changes nothing; the response is to rotate the credential or act on the content.
- **Forwarding of the link itself before it is opened.** Whoever opens it first gets the content. Revocation only helps if you act before that.

So revocation is a control for the gap between sending and opening. Keep that gap short and watch it.

## Send a revocable link

1. **Verify the recipient** through a channel you already trust. Most revocations that matter are the result of a misaddressed message, and the check is cheaper than the recovery.
2. **Include only what the recipient needs.** One credential, one piece of information, one task. The less in the link, the less a revocation that comes too late has to cover.
3. **Create the link** in the secret link tool (https://uselinkpilot.com/tools/free-secret-link-generator) or from your LinkPilot account. The text is encrypted in your browser before it is stored. A signed-in account gives you the link in your Secret Links list, which is where you revoke it from.
4. **Set the expiry to the real window**, an hour or a day, and the view limit to one. Expiry is the backstop; the single open is the main control; revocation is the override.
5. **Add a passphrase on a Pro account** for a message that would be serious if forwarded, and send the passphrase by a different route.
6. **Send the link** with one line about what it is and when it ends. Tell the recipient to open it only when they are ready and on a device they control.

## When to revoke

- **The recipient no longer needs it.** The task was cancelled, the hire fell through, the work moved to someone else.
- **You chose the wrong recipient.** Revoke first, then explain.
- **The link went somewhere public**: a group channel, a ticket many people read, a forwarded email.
- **The window was too long.** You set seven days and the handoff finished in an hour. Revoke rather than leave it live for six more days.
- **Anything feels off.** A reply from an unexpected address, a request to resend to a different account, a recipient who says they cannot open it when the dashboard says it is unopened.

Revoking costs nothing. Create a fresh link for the right person when the situation is clear.

## Watch the link while it is live

From a LinkPilot account the secret shows its status: active, revealed, expired or revoked. Pro accounts also see an audit timeline with the time of each event. The useful habit is a single check after sending:

- **Unopened and the recipient is ready**: fine, wait.
- **Opened and the recipient confirms**: done, nothing to revoke.
- **Opened and the recipient did not open it**: treat the content as exposed. Rotate the credential or act on the information, then look at how the link travelled.
- **Unopened and anything above applies**: revoke now.

The who-opened-it guide (https://uselinkpilot.com/blog/can-you-see-who-opened-a-one-time-link) explains what a reveal record can and cannot tell you about the person on the other end.

## Mistakes that make revocation arrive too late

- **Assuming deletion is revocation.** Deleting the chat message removes the link from view; the secret is still live until you revoke it in the tool.
- **Posting in a group.** With forty people able to click, revocation is a race you will lose. Send sensitive links directly.
- **Sending the passphrase alongside.** One exposed message then carries everything, and revocation has to beat the reader.
- **Not testing the recipient path.** A recipient who struggles to open a link asks for it to be resent, and resent links multiply. Try the flow once with a harmless message so the real one goes smoothly.
- **Treating a revocable link as storage.** It is a handoff. The recipient saves the content where it belongs, and the link is gone.

For a plain URL that should stop working on a date, LinkPilot's expiring link tool (https://uselinkpilot.com/tools/temporary-link) does that, and the link can be disabled early from the dashboard. The difference is that an expiring short link (https://uselinkpilot.com/glossary#short-link) only stops redirecting; a secret link's revocation destroys the content itself.

## Related reading

- Expiring links: the secret is destroyed, not just redirected: https://uselinkpilot.com/blog/expiring-links-security
- Can you see who opened a one-time secret link?: https://uselinkpilot.com/blog/can-you-see-who-opened-a-one-time-link
- How one-time secret links work: https://uselinkpilot.com/blog/how-one-time-secret-links-work
- How to share credentials securely without email: https://uselinkpilot.com/blog/how-to-share-credentials-securely-without-email

## Tools for this article

One-Time Secret Link Generator

Share a password or note through a link that opens once.
https://uselinkpilot.com/tools/free-secret-link-generator

Expiring Link Generator

Create links that stop working at a set time.
https://uselinkpilot.com/tools/temporary-link

Self-Destructing Message

Send a note that disappears after one read.
https://uselinkpilot.com/tools/burn-after-read-secret

## Frequently asked questions

### Can you revoke a link after sending it?

### Is expiration the same as revocation?

### Can revoking a link delete a message the recipient already saw?

### Should you send a passcode with the link?

### Is a one-time link the same as a revocable link?

### How long should a sensitive message stay available?

## LinkPilot sends a secret link that is gone after it is opened.

Encrypted in your browser, revealed once, then destroyed. No account needed.

Create a secret link (https://uselinkpilot.com/tools/free-secret-link-generator)

## Read next

Security

### How to Share a Private Certificate Through a Secure Link Safely

Separate the certificate from its private key, package the key in a password-protected PFX, send it through a one-time link and send the password separately.
https://uselinkpilot.com/blog/how-to-share-a-private-certificate-through-a-secure-link-safely

Security

### How to Securely Deliver a Config File to a Developer

Split settings from secrets, send the secret values through a one-time link or an attachment that burns after one download, and keep the .env out of git.
https://uselinkpilot.com/blog/how-to-securely-deliver-a-config-file-to-a-developer

Security

### How to Implement Secure Secret Sharing for Remote Teams

Secure secret sharing for remote teams in five steps: inventory, vault or one-time link by lifespan, three rules, the tool inside Slack, and a plan for leaks.
https://uselinkpilot.com/blog/how-to-implement-secure-secret-sharing-for-remote-teams

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "position": 1,
        "name": "Home",
        "item": "https://uselinkpilot.com/"
      },
      {
        "@type": "ListItem",
        "position": 2,
        "name": "Blog",
        "item": "https://uselinkpilot.com/blog"
      },
      {
        "@type": "ListItem",
        "position": 3,
        "name": "How to Share a Sensitive Message With a Link That Can Be Revoked",
        "item": "https://uselinkpilot.com/blog/how-to-share-a-sensitive-message-with-a-link-that-can-be-revoked"
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "BlogPosting",
    "@id": "https://uselinkpilot.com/blog/how-to-share-a-sensitive-message-with-a-link-that-can-be-revoked#article",
    "headline": "How to Share a Sensitive Message With a Link That Can Be Revoked",
    "description": "Revocation ends access before expiry does. How a revocable link differs from an expiring one, how to send one, when to pull it, and what revoking cannot undo.",
    "datePublished": "2026-10-26",
    "dateModified": "2026-10-26",
    "image": "https://uselinkpilot.com/logo-512.png",
    "author": {
      "@type": "Organization",
      "@id": "https://uselinkpilot.com/author/linkpilot-team#organization",
      "name": "LinkPilot Team",
      "url": "https://uselinkpilot.com/author/linkpilot-team"
    },
    "publisher": {
      "@type": "Organization",
      "name": "LinkPilot",
      "url": "https://uselinkpilot.com",
      "logo": {
        "@type": "ImageObject",
        "url": "https://uselinkpilot.com/logo-512.png",
        "width": 512,
        "height": 512
      }
    },
    "mainEntityOfPage": {
      "@type": "WebPage",
      "@id": "https://uselinkpilot.com/blog/how-to-share-a-sensitive-message-with-a-link-that-can-be-revoked"
    }
  },
  {
    "@context": "https://schema.org",
    "@type": "FAQPage",
    "mainEntity": [
      {
        "@type": "Question",
        "name": "Can you revoke a link after sending it?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "Yes, as long as it has not been opened. Revoking a LinkPilot secret link destroys the stored secret immediately and the link returns a gone response from then on. After a one-time link has been opened there is nothing left to revoke, because the reveal already destroyed it."
        }
      },
      {
        "@type": "Question",
        "name": "Is expiration the same as revocation?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "No. Expiration is scheduled: the link dies at a time you set when creating it. Revocation is on demand: you end it now, because the situation changed. A good link has both, and you use revocation when the deadline is too far away."
        }
      },
      {
        "@type": "Question",
        "name": "Can revoking a link delete a message the recipient already saw?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "No. Revocation controls access to the stored copy. Anything already revealed is on the recipient's screen or clipboard, and may be in a screenshot. Revoke to stop future access; rotate or act on the content if it was already seen by the wrong person."
        }
      },
      {
        "@type": "Question",
        "name": "Should you send a passcode with the link?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "No. The passphrase goes by a different channel so a single exposed message cannot be used alone. On LinkPilot, passphrase protection is a Pro feature."
        }
      },
      {
        "@type": "Question",
        "name": "Is a one-time link the same as a revocable link?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "They overlap. A one-time link destroys itself on first open; a revocable link lets you destroy it before anyone opens it. LinkPilot secret links are both, and also expire on a timer."
        }
      },
      {
        "@type": "Question",
        "name": "How long should a sensitive message stay available?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "As short as the handoff allows. An hour if the recipient is waiting, a day across time zones. Rely on the single reveal and revocation as the controls, and treat expiry as the backstop for a link nobody opens."
        }
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "SoftwareApplication",
    "@id": "https://uselinkpilot.com/#software",
    "name": "LinkPilot",
    "applicationCategory": "BusinessApplication",
    "operatingSystem": "Web",
    "description": "LinkPilot is a secure link management platform for creating branded short links, tracking engagement, and sharing secrets with expiring, protected, self-destructing links.",
    "url": "https://uselinkpilot.com",
    "offers": [
      {
        "@type": "Offer",
        "name": "Free",
        "price": "0",
        "priceCurrency": "USD",
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Pro",
        "price": "29",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "29",
          "priceCurrency": "USD",
          "billingDuration": "P1M"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Agency",
        "price": "299",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "299",
          "priceCurrency": "USD",
          "billingDuration": "P1M"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Agency Plus",
        "price": "799",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "799",
          "priceCurrency": "USD",
          "billingDuration": "P1M"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Enterprise",
        "priceSpecification": {
          "@type": "PriceSpecification",
          "priceCurrency": "USD"
        },
        "url": "https://uselinkpilot.com/pricing"
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "https://uselinkpilot.com/#organization",
    "name": "LinkPilot",
    "alternateName": "LinkPilot by TetraCore",
    "url": "https://uselinkpilot.com",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "support@uselinkpilot.com",
      "url": "https://uselinkpilot.com/support"
    },
    "parentOrganization": {
      "@type": "Organization",
      "@id": "https://tetracorehq.com/#organization",
      "name": "TetraCore",
      "url": "https://tetracorehq.com/"
    },
    "logo": {
      "@type": "ImageObject",
      "url": "https://uselinkpilot.com/logo-512.png",
      "width": 512,
      "height": 512
    },
    "description": "LinkPilot is a secure link management platform for creating branded short links, tracking engagement, and sharing secrets with expiring, protected, self-destructing links.",
    "sameAs": [
      "https://x.com/uselinkpilot",
      "https://www.linkedin.com/company/uselinkpilot",
      "https://facebook.com/uselinkpilot",
      "https://github.com/TetraCoreHQ/linkpilot-cli",
      "https://github.com/TetraCoreHQ/linkpilot-mcp",
      "https://www.npmjs.com/package/linkpilot",
      "https://www.npmjs.com/package/@uselinkpilot/sdk",
      "https://www.npmjs.com/package/@uselinkpilot/mcp",
      "https://chromewebstore.google.com/detail/linkpilot-short-links-and/mnmppadihpcncicldpkmgknhnjkondad"
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "WebSite",
    "name": "LinkPilot",
    "url": "https://uselinkpilot.com",
    "potentialAction": {
      "@type": "SearchAction",
      "target": "https://uselinkpilot.com/blog?q={search_term_string}",
      "query-input": "required name=search_term_string"
    }
  }
]
```