Encrypted in your browser
Free tool
Stop pasting passwords into emails and chats where they stay forever. Make a link instead: it shows the password once, then it's gone for good.
Type or paste what you want to share. It's encrypted before it leaves this page.
0 / 10,000 characters
By creating a link you agree not to use it for anything unlawful or for phishing. Please don't share card or bank details.
Send it however you like. It works once, and if nobody opens it, it's deleted in .
We can't show this link again or recover it: the key is only in the link itself. Tip: send the username and the link separately, for example one by email and one by text.
How it works
The clever part is the bit after the # in your link.
Your browser makes a random 256-bit key and encrypts your text with it (AES-GCM), right here on this page.
We store the encrypted copy. The key goes after the # in the link, and browsers never send that part to a website.
When the person you sent it to presses Reveal, their browser fetches the copy and unlocks it with the key from the link.
The encrypted copy is erased the moment it's handed over, or when its time runs out. Nobody can open it again.
Questions
An emailed password sits in your sent folder, their inbox and every backup of both for years. If either account is ever broken into, it's there to find. A one-time link leaves nothing behind once it's been opened.
No. It's encrypted in your browser before it's sent, and the key only exists in the link you share. We only ever hold the scrambled copy, and we delete that too once it's opened or expires.
Then the person you sent it to will see that it's already been opened, and when. That's your warning: change the password and send a new link.
No. Opening the link only shows a Reveal button. The secret is only handed over, and deleted, when a person presses it.
Up to 10,000 characters of text: a password, a few logins, a recovery code or a short private note. Please don't use it for card or bank details.
Free tools
Made on your device
Strong random passwords, made in your browser and never sent anywhere. No adverts, no sign up.
Make a passwordChecked without being sent
See if a password has turned up in a known data breach, without the password ever leaving your device.
Check a password30+ checks, in plain English
Check a domain's nameservers, website, MX, SPF, DMARC and more, in plain English with how to fix each problem.
Run a DNS reportFor wp-config.php and .env
Fresh security keys and salts for wp-config.php, made in your browser. Change them after a hack to sign everyone out.
Make new saltsBy our sister site, SitePulse
A free check of your WordPress site from the outside, by SitePulse: the versions it gives away, files that shouldn't be public and common weak spots.
Scan with SitePulse