Secret link

    Turn a password, key or note into a link that only one person can open, once.

    0/10,000 characters

    Passphrase protection is available on Pro ($29/mo). See plans

    Burn after read is always on for anonymous secrets. The link self-destructs after one view.
    Burn after read
    Encrypted in your browser
    Never expires (until read)

    No account needed. Free forever plan.

    How it works

    1. 01

      Paste a password, a key, or a file

      Encrypted in your browser before anything is sent. Burn after read is on for every anonymous secret.

    2. 02

      Send the link

      One URL. The key after the # stays in the browser and never reaches our servers.

    3. 03

      The stored secret is gone

      The first open burns the ciphertext. A second visit, by anyone, meets the destroyed page.

    Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model.

    What makes a link secret

    Two things. The contents are encrypted before they leave your device, so the server that stores them cannot read them. And the link reveals its contents once, so there is nothing to find afterwards. LinkPilot does both: AES-GCM-256 in your browser, the key after the # in the link where browsers never send it, and a burn on first reveal that overwrites the stored ciphertext.

    The link itself is the key, which is the one thing to remember. Send it over a channel you trust, and if the recipient reports a burned link before they opened it, treat the contents as exposed.

    Secret link generator: how to use it

    Paste the text above, press the button, copy the link. That is the whole process, and it needs no account. An unopened link expires after seven days. A free account adds a shorter timer (one hour, 24 hours or seven days) and revocation from the dashboard. Pro adds a passphrase, which is mixed into the decryption key so the link alone cannot open the secret, plus a custom expiry and the audit timeline.

    Secret links in the tools you already use

    The same secret link can be made from the Slack app with the /secret command, from the Chrome extension on selected text, and from the CLI and API for scripts. The apps page lists each one and says where the encryption happens in each case.

    Frequently asked questions

    Pro, $29 a month, adds a passphrase on every secret, a custom expiry date and time, and the audit timeline that records each view, burn and revoke. See plans.

    Related

    All use cases