Is an encrypted link end-to-end encrypted?

Yes, in the sense that matters: encryption happens in the sender's browser, decryption in the recipient's, and the key never touches a server. The link carries the key, so protect the link.

What if someone intercepts the link?

Whoever holds the full link can open it once. Keep the expiry short, send the link by one channel and, on Pro, the passphrase by another. A burned link before your recipient opened it means the text was exposed.

Can LinkPilot decrypt a link if asked to?

No. We never receive the key. A burned, expired or revoked secret cannot be recovered by us or by you.

Does the encryption work in every browser?

It uses the Web Crypto API, which every current browser on desktop and mobile supports.

Encrypted link

Share text through a link whose contents are encrypted before they leave your browser.

No account needed. Free forever plan.

How it works

01
Paste a password, a key, or a file

Encrypted in your browser before anything is sent. Burn after read is on for every anonymous secret.
02
Send the link

One URL. The key after the # stays in the browser and never reaches our servers.
03
The stored secret is gone

The first open burns the ciphertext. A second visit, by anyone, meets the destroyed page.

Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model.

What is encrypted, and where

The text you paste is encrypted on your own device with AES-GCM-256 and a 256-bit key generated in your browser. Only the ciphertext is sent. The key is appended to the link after the #, the fragment, which browsers do not send to any server, not to LinkPilot and not to the edge that serves the reveal page. The recipient's browser reads the key from the fragment and decrypts the text locally.

The practical result: our servers, database and backups hold ciphertext they cannot open. The link is the only key, so a link in the wrong hands is the one risk, and the burn on first reveal and the expiry are what limit it.

Encrypted text online, without an account

The creator at the top of this page makes the link without a signup. An unopened link expires after seven days. A free account adds a shorter timer and revocation; Pro adds a passphrase that is stretched with PBKDF2-SHA256 and mixed into the decryption key, so neither the link alone nor the passphrase alone opens the secret.

Check it rather than trust it

The encryption code ships in the MIT-licensed linkpilot-cli repository with the test vectors the web app is checked against, and the security architecture page lists exactly what reaches our servers and what is logged. Two limits are stated there: secrets created before 29 September 2026 were stored as plaintext until they expired, and an attached file's name, size and type are visible to us even though its contents are not.

Frequently asked questions

Pro, $29 a month, adds a passphrase on every secret, a custom expiry date and time, and the audit timeline that records each view, burn and revoke. See plans.

All use cases