---
title: "Share Credentials Securely With Clients & Contractors"
url: https://uselinkpilot.com/share-credentials-securely
description: "How to share credentials securely with a client or contractor: scope the login, send it through a one-time link that burns after one view, then rotate it."
lang: en
---

# Share credentials securely

Scope the login, send it once through a link that burns, and rotate it when the work is done.

## Step by step

1. 1
   ### Create a credential that is only as wide as the job
   Give the client or contractor their own login where the system allows it, with the least access that gets the work done. A credential you can revoke on its own is far easier to retire than a shared admin password.
2. 2
   ### Put the username and password in separate places
   Send the username in the email or ticket where the conversation already lives. Keep the password for the secret link, so a message on its own is not a working login.
3. 3
   ### Send the password through a one-time link
   Paste it into the creator below. The link is encrypted in your browser and burns after the first view, so nothing usable is left in the thread.
4. 4
   ### Ask them to open it now and store it in their own manager
   The link works once. If they report it was already burned, someone else opened it first: rotate the credential and send a new link.
5. 5
   ### Set an end date and rotate
   When the engagement ends, change or disable the credential. On Pro, the audit timeline shows when each link was opened, which helps when you need to say who had access and when.

## Send it with a one-time link

No account needed. Free forever plan.

## How it works

1. 01
   ### Paste a password, a key, or a file
   Encrypted in your browser before anything is sent. Burn after read is on for every anonymous secret.
2. 02
   ### Send the link
   One URL. The key after the # stays in the browser and never reaches our servers.
3. 03
   ### The stored secret is gone
   The first open burns the ciphertext. A second visit, by anyone, meets the destroyed page.

Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model (https://uselinkpilot.com/security-architecture).

## How to share login credentials with a client or contractor

The steps above cover the common case: an agency handing a client their new site's admin login, a firm giving a contractor a database or VPN credential, or an IT team onboarding a vendor. The principle is the same each time. The message in the inbox should never be a complete login, and the password should exist in only one place after it has been read: the recipient's password manager.

## Why a one-time link beats email, chat and shared documents

Email is forwarded, searched and backed up. Chat history is exported. A shared document keeps every version. A one-time link is different in kind: it carries ciphertext that only the key in the link can open, the first reveal destroys the stored copy, and a link found later leads to a burned page. With a free account you can also revoke it before it is opened, which no email can do.

## Credentials that are more than a password

Connection strings, SSH keys and `.env` files are credentials too. Text of any kind fits in the creator. With a free account you can attach a file, encrypted the same way, so a key file or a config travels behind the same burn and expiry controls. For keys specifically, see how to share API keys securely (https://uselinkpilot.com/share-api-keys-securely).

## Frequently asked questions

### Should I send the username and the password together?

### What if the contractor needs the credential for months?

### Can I see whether the client opened the link?

### Is this compliant with client security policies?

Pro, $29 a month, adds a passphrase on every secret, a custom expiry date and time, and the audit timeline that records each view, burn and revoke. See plans (https://uselinkpilot.com/pricing).

## Related

- Share a password securely: https://uselinkpilot.com/share-password-securely
- How to share API keys securely: https://uselinkpilot.com/share-api-keys-securely
- Secure file sharing with clients: https://uselinkpilot.com/secure-file-sharing-with-clients
- Best way to share passwords with a team: https://uselinkpilot.com/share-passwords-with-team

All use cases: https://uselinkpilot.com/use-cases

## Structured data

```json
[
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "position": 1,
        "name": "Home",
        "item": "https://uselinkpilot.com/"
      },
      {
        "@type": "ListItem",
        "position": 2,
        "name": "Use cases",
        "item": "https://uselinkpilot.com/use-cases"
      },
      {
        "@type": "ListItem",
        "position": 3,
        "name": "Share credentials securely",
        "item": "https://uselinkpilot.com/share-credentials-securely"
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "FAQPage",
    "mainEntity": [
      {
        "@type": "Question",
        "name": "Should I send the username and the password together?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "No. Put the username in the normal conversation and only the password in the one-time link. A message that leaks then gives away half a login, not all of it."
        }
      },
      {
        "@type": "Question",
        "name": "What if the contractor needs the credential for months?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "Then it belongs in a password manager with shared access, and the one-time link is how you get it there the first time. Rotate it when the engagement ends."
        }
      },
      {
        "@type": "Question",
        "name": "Can I see whether the client opened the link?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "On Pro, yes: the audit timeline records each view with its time, the country reported by the edge, the browser string and a daily-salted hash of the address. On any plan a burned link means it was opened."
        }
      },
      {
        "@type": "Question",
        "name": "Is this compliant with client security policies?",
        "acceptedAnswer": {
          "@type": "Answer",
          "text": "Most policies ask that credentials are not sent in plain text and that access can be revoked. A browser-encrypted one-time link with an expiry meets both; the security architecture page spells out what is stored and logged so you can check it against the policy."
        }
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "HowTo",
    "name": "Share credentials securely",
    "description": "Scope the login, send it once through a link that burns, and rotate it when the work is done.",
    "step": [
      {
        "@type": "HowToStep",
        "position": 1,
        "name": "Create a credential that is only as wide as the job",
        "text": "Give the client or contractor their own login where the system allows it, with the least access that gets the work done. A credential you can revoke on its own is far easier to retire than a shared admin password."
      },
      {
        "@type": "HowToStep",
        "position": 2,
        "name": "Put the username and password in separate places",
        "text": "Send the username in the email or ticket where the conversation already lives. Keep the password for the secret link, so a message on its own is not a working login."
      },
      {
        "@type": "HowToStep",
        "position": 3,
        "name": "Send the password through a one-time link",
        "text": "Paste it into the creator below. The link is encrypted in your browser and burns after the first view, so nothing usable is left in the thread."
      },
      {
        "@type": "HowToStep",
        "position": 4,
        "name": "Ask them to open it now and store it in their own manager",
        "text": "The link works once. If they report it was already burned, someone else opened it first: rotate the credential and send a new link."
      },
      {
        "@type": "HowToStep",
        "position": 5,
        "name": "Set an end date and rotate",
        "text": "When the engagement ends, change or disable the credential. On Pro, the audit timeline shows when each link was opened, which helps when you need to say who had access and when."
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "SoftwareApplication",
    "@id": "https://uselinkpilot.com/#software",
    "name": "LinkPilot",
    "applicationCategory": "BusinessApplication",
    "operatingSystem": "Web",
    "description": "LinkPilot is a secure link management platform for creating branded short links, tracking engagement, and sharing secrets with expiring, protected, self-destructing links.",
    "url": "https://uselinkpilot.com",
    "offers": [
      {
        "@type": "Offer",
        "name": "Free",
        "price": "0",
        "priceCurrency": "USD",
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Pro",
        "price": "29",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "29",
          "priceCurrency": "USD",
          "billingDuration": "P1M"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Agency",
        "price": "299",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "299",
          "priceCurrency": "USD",
          "billingDuration": "P1M"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Agency Plus",
        "price": "799",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "799",
          "priceCurrency": "USD",
          "billingDuration": "P1M"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Pro (yearly)",
        "price": "288",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "288",
          "priceCurrency": "USD",
          "billingDuration": "P1Y"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Agency (yearly)",
        "price": "2988",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "2988",
          "priceCurrency": "USD",
          "billingDuration": "P1Y"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Agency Plus (yearly)",
        "price": "7980",
        "priceCurrency": "USD",
        "priceSpecification": {
          "@type": "UnitPriceSpecification",
          "price": "7980",
          "priceCurrency": "USD",
          "billingDuration": "P1Y"
        },
        "url": "https://uselinkpilot.com/pricing"
      },
      {
        "@type": "Offer",
        "name": "Enterprise",
        "priceSpecification": {
          "@type": "PriceSpecification",
          "priceCurrency": "USD"
        },
        "url": "https://uselinkpilot.com/pricing"
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "Organization",
    "@id": "https://uselinkpilot.com/#organization",
    "name": "LinkPilot",
    "alternateName": "LinkPilot by TetraCore",
    "url": "https://uselinkpilot.com",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "support@uselinkpilot.com",
      "url": "https://uselinkpilot.com/support"
    },
    "parentOrganization": {
      "@type": "Organization",
      "@id": "https://tetracorehq.com/#organization",
      "name": "TetraCore",
      "url": "https://tetracorehq.com/"
    },
    "logo": {
      "@type": "ImageObject",
      "url": "https://uselinkpilot.com/logo-512.png",
      "width": 512,
      "height": 512
    },
    "description": "LinkPilot is a secure link management platform for creating branded short links, tracking engagement, and sharing secrets with expiring, protected, self-destructing links.",
    "sameAs": [
      "https://x.com/uselinkpilot",
      "https://www.linkedin.com/company/uselinkpilot",
      "https://facebook.com/uselinkpilot",
      "https://github.com/TetraCoreHQ/linkpilot-cli",
      "https://github.com/TetraCoreHQ/linkpilot-mcp",
      "https://www.npmjs.com/package/linkpilot",
      "https://www.npmjs.com/package/@uselinkpilot/sdk",
      "https://www.npmjs.com/package/@uselinkpilot/mcp",
      "https://chromewebstore.google.com/detail/linkpilot-short-links-and/mnmppadihpcncicldpkmgknhnjkondad",
      "https://addons.mozilla.org/en-US/firefox/addon/uselinkpilot/"
    ]
  },
  {
    "@context": "https://schema.org",
    "@type": "WebSite",
    "name": "LinkPilot",
    "url": "https://uselinkpilot.com",
    "potentialAction": {
      "@type": "SearchAction",
      "target": "https://uselinkpilot.com/blog?q={search_term_string}",
      "query-input": "required name=search_term_string"
    }
  }
]
```