Encrypted Secret Link
Share a secret via a self-decrypting link.
Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.
Type a secret and a password to get a link you can share. The note is encrypted in your browser and placed in the link’s # fragment — which browsers never send to a server — so opening the link only reveals the secret to someone who also has the password. No account, no server, nothing stored.
Frequently asked questions
Where is the secret stored?
Nowhere. The encrypted payload lives in the URL after the # (the “fragment”), which your browser never transmits to a server. Only someone with the link and the password can read it.
How is it encrypted?
AES-256-GCM with a key derived from your password (PBKDF2-SHA-256). The whole encrypt/decrypt cycle is client-side.
Is it really “self-destructing”?
It has no server, so there is nothing to store or expire — but also nothing to auto-delete. Treat the link like the secret and share the password separately.
How long can the secret be?
Browsers limit URL length (tens of KB), so it suits passwords, keys and short notes rather than large documents.