Paste a password, key or note and get a link that works once. The text is encrypted in your browser before it is sent, and the secret is destroyed after the first read. No account needed. Passphrase protection is available on Pro ($29/mo).
No credit card required · Free forever plan
The secret was encrypted in this browser and the key was placed after the # in the link. It opens once; the first open destroys the stored copy.
Sharing credentials with a team? See how secure password sharing for teams compares with email, chat and password managers, or share passwords in Slack without leaving the channel.
Browser-side encryption shipped on 29 September 2026. Secrets created before that date were stored as plaintext until they expired, and a file's name, size and type are still visible to us. Read the full security model.
Type or paste the secret
Drop in the password, API key, or secret message you need to share.
Check the burn-after-read notice
Anonymous secrets always burn on the first read. Passphrase protection, which keeps a leaked URL from revealing the secret, is a Pro feature.
Send the link
Share the link in chat or email. The first successful view burns the secret — it can never be read again.
A one-time secret link is a URL that reveals sensitive content (a password, an API key, a private note) exactly once and then destroys it. After the first successful view, the encrypted payload is gone — there's nothing left on our servers to leak, screenshot from a logging system, or recover from backups.
Type the password into the generator and send the link. The first reveal burns it. If you're worried about the URL leaking — for example into a screenshot, a corporate proxy log, or the wrong Slack channel — a Pro workspace lets you add a passphrase the recipient must enter, so the secret stays protected even if the URL doesn't.
API keys end up in inboxes, chat history, and screenshots forever when sent in plain text. A one-time secret link removes the key from existence the moment the recipient reads it. On Pro, combine it with a passphrase shared over a separate channel for two-factor delivery — the link in email, the passphrase by phone or in person.
OneTimeSecret pioneered the burn-after-read pattern and remains a fine choice if you want a single-purpose open-source tool. LinkPilot is a hosted alternative with a modern UI, optional file attachments on paid tiers, a full audit timeline, and a workspace that also handles your branded short links. The free anonymous tier is comparable: encrypted in your browser, one-time reveal, no account required. Passphrase protection is on Pro.
Once you send a password over email or Slack, it lives forever in the recipient's inbox, in backups, and in their search history. Secret links remove the secret as soon as it's been read, so it can't be re-discovered months later by someone else.
Create a free account to claim your links, get private analytics, revoke after sending, and manage everything in one workspace. Passphrase protection is available on Pro.