Encrypt the message in your browser and send a link that can be read once.
No account needed. Free forever plan.
Encrypted in your browser before anything is sent. Burn after read is on for every anonymous secret.
One URL. The key after the # stays in the browser and never reaches our servers.
The first open burns the ciphertext. A second visit, by anyone, meets the destroyed page.
Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model.
Three properties. The text is encrypted on your device with AES-GCM-256 before anything is sent. The key travels in the link after the #, which browsers never send to a server, so LinkPilot cannot read the message. And the message can be revealed once; the first reveal overwrites the stored ciphertext. A message that is unreadable in storage and gone after one read is as secure as a message can be while still being deliverable over ordinary email or chat.
Write it above, press the button, and send the link by whatever channel you already use. The recipient opens it in any browser; there is no app and no account on their side. If you need to send a secure text to a phone, paste the link into an SMS. The SMS carries nothing sensitive, only a link that will be useless after one reveal.
An unread anonymous message expires after seven days. A free account lets you set one hour, 24 hours or seven days and revoke the message from the dashboard. Pro adds a passphrase that you share by a second route, a custom expiry date and time, and an audit timeline that records each view and burn. The encrypted link page explains the cryptography in more detail.
Pro, $29 a month, adds a passphrase on every secret, a custom expiry date and time, and the audit timeline that records each view, burn and revoke. See plans.