One-Time Secret Sharing

Share a password securely with a one-time link

Pasting a password into email, WhatsApp, or Slack leaves it sitting in inboxes and chat history forever, where anyone with access to that account can read it later. This free one-time secret tool fixes that: type your secret, get a single-use link, and share it. The moment the recipient reveals it, the encrypted data is permanently destroyed.

Why you should not send passwords over email or WhatsApp

Standard email is not encrypted end-to-end — copies live on mail servers, in backups, and in the recipient's inbox indefinitely. WhatsApp messages are encrypted in transit, but they still linger in cloud chat backups. Either way, a sensitive password can resurface long after you sent it. A self-destructing link removes that risk by leaving nothing behind.

How one-time secret sharing works

Your secret is encrypted right inside your browser using AES-256 before it ever leaves your device. The decryption key is placed in the link itself (after the # symbol) and is never sent to our servers — so we store only scrambled data we cannot read. This is called zero-knowledge encryption: what we hold is unreadable to us, and to anyone who gets access to our database.

• Burn after reading — the secret is destroyed after a single view.
• Auto-expiry — choose 5 minutes to 7 days; it deletes itself when the timer runs out.
• Optional passphrase — add a second password, shared separately, for an extra layer.

How to share a password securely, step by step

1. Paste your password, API key, or note into the box above.
2. Optionally set a passphrase and an expiry time.
3. Click Create secret link and copy the link.
4. Send the link to your recipient. It works once, then it is gone.

Worked example: send a database password to a teammate

1. Paste db-password: Tr0ub4dor&3 into the box, choose 1 hour, and click Create secret link.
2. You get a link like https://srinfobiz.com/free-tools/secret-share/v/AbC…#xYz…. Everything before the # identifies the stored data. Everything after the # is the decryption key, and your browser never sends it to us.
3. Send the link by chat or email. For extra safety, set a passphrase and share it separately, for example by phone.
4. Your teammate opens the link and clicks Reveal & destroy. They see the password once, and it is deleted from our server at that moment. Opening the link again shows "This secret is no longer available".

Common uses

• Sending a password or login to a teammate or client.
• Sharing an API key, database credential, or recovery code with a developer.
• Passing along Wi-Fi passwords, PINs, or private notes safely.

A privacy-first, India-made alternative to OneTimeSecret

If you have used OneTimeSecret, Privnote, or similar tools, this works the same way — zero-knowledge, burn-after-reading, no account — and it is built and hosted privacy-first in India. Need a strong password to share? Generate one with our free password generator, then send it securely here.