Send a secret message

    Write the message, send the link, and it is destroyed after the first read.

    0/10,000 characters

    Passphrase protection is available on Pro ($29/mo). See plans

    Burn after read is always on for anonymous secrets. The link self-destructs after one view.
    Burn after read
    Encrypted in your browser
    Never expires (until read)

    No account needed. Free forever plan.

    How it works

    1. 01

      Paste a password, a key, or a file

      Encrypted in your browser before anything is sent. Burn after read is on for every anonymous secret.

    2. 02

      Send the link

      One URL. The key after the # stays in the browser and never reaches our servers.

    3. 03

      The stored secret is gone

      The first open burns the ciphertext. A second visit, by anyone, meets the destroyed page.

    Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model.

    How to send a secret message that nobody else can read

    Write the message in the box above. Your browser encrypts it with AES-GCM-256 and keeps the key in the link after the #, so LinkPilot stores ciphertext it cannot open. Send the link by text, email or chat. The recipient opens it in any browser, presses reveal, and reads the message. The stored copy is destroyed as part of that reveal, and the link shows a burned page to anyone who tries it afterwards.

    No app is needed on either side, and the recipient does not need an account.

    Send a secret: what to put in it

    The message can be anything you would rather not leave in a chat history: a password, an address, a private answer, a code. If it includes something the recipient will need again, say so in the message and ask them to store it, because the link will not open twice.

    Timers, revocation and passphrases

    An unread anonymous message expires after seven days. A free account lets you choose one hour, 24 hours or seven days and revoke a message from the dashboard before it is read. Pro adds a passphrase, which you share by a second route so the link alone is not enough, a custom expiry date and time, and an audit timeline of each view and burn.

    Frequently asked questions

    Pro, $29 a month, adds a passphrase on every secret, a custom expiry date and time, and the audit timeline that records each view, burn and revoke. See plans.

    Related

    All use cases