For IT providers, agencies and freelancers
Stop clients emailing you their passwords.
Give every client one instruction: paste the login into a free one-time link and send the link. It is encrypted in their browser, it works once, and it is destroyed after you open it. No account needed on either side.
Free for anyone. Pro adds passphrases, custom expiry and an audit timeline for $29/mo.
Who this is for
- IT support and managed service providers who receive admin logins in tickets
- WordPress and web freelancers who need hosting, FTP and admin access to start a job
- Marketing agencies given ad account and analytics access by clients
- Hosting and SaaS support desks that ask customers for app passwords
- Bookkeepers and accountants handed bank and payroll portal logins
- Anyone whose intake form has a field that says "password"
What happens to a password sent by email
An emailed password is stored on the sender's mail server, on yours, in both sent folders, on every phone that syncs the mailbox, and in every backup of all of those. It stays readable for as long as those copies exist, which is usually years. Anyone who later gets into either mailbox gets the password too.
A one-time link changes that. The password is encrypted in the client's browser before anything is sent. LinkPilot stores only the encrypted text and never has the key. When you open the link once, the stored copy is destroyed. If the link is never opened, it expires on its own.
Give clients one instruction
Paste one of these into your onboarding email, your intake form, your contract or your help center. The wording is yours to change.
Copy the client instruction
One sentence for your onboarding email, intake form or help center. Clients follow it without an account.
Or send them a request link
If you would rather not explain anything, send a request instead. From your LinkPilot workspace, create a secret request: what you need and how long the link should work. You get one link to send. The client opens it, sees your workspace name and your note, pastes the password, and is done.
Their browser encrypts it with a key that travels in the request link and never reaches LinkPilot. The password lands in your workspace as a one-time secret that only you can open, once. A request link takes a single submission, and a free workspace can keep three requests open at a time.
How the free link works
- 1
The client pastes the login
They open the free tool, paste the password or key, and get a link. No account, no app to install.
- 2
They send you the link
By email, chat or your intake form. The link carries the key; the stored text is useless without it.
- 3
You open it once
The text appears in your browser and the stored copy is destroyed at that moment. A second click shows nothing.
For teams that do this every day
The free tool covers the occasional handoff. If credentials arrive every week, a Pro workspace gives you passphrase protection, custom expiry, an audit timeline for every secret and 50 secret links for $29 a month. An Agency plan adds up to 25 isolated client workspaces, so each client's secrets stay with that client.
Questions providers ask
Does the client need a LinkPilot account?
No. The free secret link tool works without signing up. Only you need an account, and only if you want the Pro features.
What is the difference between the instruction and a request link?
The instruction tells the client to make a one-time link themselves and send it to you. A request link does that first step for them: you send one link, they paste the password into it, and it arrives in your workspace. Use the instruction on a public page; use a request when you are already talking to one client.
Can LinkPilot read the password?
No. The text is encrypted in the client's browser, and the key travels in the link itself, in the part after the hash sign that browsers never send to a server. LinkPilot stores only the encrypted text.
What if the link is opened by the wrong person?
Whoever opens it first sees it and destroys it. If you open it and find nothing, the link was already used, and you should ask the client to change that password. On Pro you can add a passphrase, so a leaked link alone shows nothing.
How long does an unopened link last?
Free links expire after seven days. Pro workspaces can set a custom expiry.
Can I put this instruction on my website?
Yes. Use the website version of the text above. Linking to the tool is welcome and needs no permission.