Self-destructing message
Turn a password, API key, or recovery code into a one-time encrypted link. The key sits after # in the URL. After the first open, it burns. Creating a link does not require an account; recipients do not need one either.
How a one-time encrypted share works
Chat apps and email keep plaintext in history. A self-destructing message is for a short secret that should be read once: the browser encrypts with AES-256-GCM, the server holds ciphertext only, and the decryption key sits after # — that fragment is not sent with the HTTP request.
The recipient opens the read page and decrypts locally. No account is required. After the first successful read, the ciphertext is burned. You can also set expiry to 1 hour, 24 hours, or 7 days, and allow up to 10 reads. Each secret is capped at 32 KB — passwords, key fragments, and short notes, not whole files. For a file, use encrypt a file.
- Send the full URL; without the part after #, decryption fails
- A lost or burned link cannot be restored — create a new one to send again
- It does not stop screenshots or forwarding; it reduces repeat opens and server-side plaintext
FAQ
Does the recipient of a self-destructing message need an account?
No. Creating and reading a link both work without an account. The recipient opens the read page directly. After the first successful read, the secret is destroyed. Opening the same link again shows that it has been burned.
Can the server read the plaintext I share?
No. The text is encrypted in the browser before ciphertext is uploaded. The decryption key sits in the URL fragment after # and is not sent with the HTTP request. The algorithm is AES-256-GCM; see MDN AES-GCM.
Can I recover a lost or expired link?
No. There is no plaintext copy on the server. Send the full URL and open it before it expires. To send again, create a new link.
Does a self-destructing message stop screenshots?
No. It reduces repeat opens and long-lived plaintext on the server. It cannot stop copy, screenshots, or forwarding. Use it when you trust the recipient to read once and stop.