Is it safe to send a password through a link?

Safer than sending the password itself. The link carries ciphertext that only the key after the # can open, the first view destroys the stored copy, and a link found later in an inbox leads to a burned page. The link is still the key, so send it over one channel and, on Pro, the passphrase over another.

Can LinkPilot read the password I send?

No. Encryption happens in your browser and the key never reaches our servers; we hold ciphertext we cannot open. Secrets created before 29 September 2026 were stored as plaintext until they expired, as the security architecture page states.

What happens if the recipient never opens the link?

An anonymous link expires unread after seven days and the stored ciphertext is overwritten. With a free account you can pick a shorter window or revoke the link yourself.

Does a link preview in Slack or Outlook burn the password?

No. A preview fetches only the status of the link. The secret burns on the recipient's explicit reveal, so a scanner or an unfurler cannot spend it.

Can I send a password with a file, such as a config?

Yes, with a free account. Attachments are encrypted the same way as text and travel behind the same burn and expiry controls. A file's name, size and type stay visible to us even though its contents do not.

Send a password securely

Paste the password below and send a link that burns after one view.

No account needed. Free forever plan.

How it works

01
Paste a password, a key, or a file

Encrypted in your browser before anything is sent. Burn after read is on for every anonymous secret.
02
Send the link

One URL. The key after the # stays in the browser and never reaches our servers.
03
The stored secret is gone

The first open burns the ciphertext. A second visit, by anyone, meets the destroyed page.

Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model.

How to securely send a password in under a minute

Type or paste the password into the box above and press the button. Your browser encrypts it with AES-GCM-256 before anything leaves your device, and the key goes into the part of the link after the #, which browsers never send to a server. LinkPilot stores ciphertext it cannot read. Send the link by email, chat or text. The first person to open it sees the password once, and the stored copy is destroyed in the same operation.

If the recipient reports that the link was already burned, somebody else opened it first. Change the password, then send a new link.

Send a password one time instead of forever

A password typed into an email or a Slack message is copied into every inbox, backup, search index and phone it touches, and it stays there. A one-time link carries the password only until it is read. After that the link points at a burned notice, and so does any copy of it in a chat log or a forwarded email.

Send passwords securely for free, online, without an account

The creator at the top of this page needs no signup and no card. An unopened link expires on its own after seven days. A free account adds a shorter timer (one hour, 24 hours or seven days) and lets you revoke a link from the dashboard before anyone opens it. Pro adds a passphrase, a custom expiry date and the audit timeline that records every view and burn.

If you send passwords to several people, create one link per person. Each one burns independently, so you know exactly who received what.

Frequently asked questions

Pro, $29 a month, adds a passphrase on every secret, a custom expiry date and time, and the audit timeline that records each view, burn and revoke. See plans.

All use cases