One-time links for secrets.
Paste a password or key and get a link that works once. It is encrypted in your browser, so the server never sees what is inside.
How it works
Write it
Type or generate the secret. Your browser encrypts it before anything is sent.
Share the link
The key sits after the # in the link. Browsers never send that part to a server.
It opens once
The recipient clicks Open. After the last view the secret is deleted for good.
Questions
What does the server store?
The encrypted text, a random salt, how many views are left and when it expires. The key that unlocks it lives only in your link, after the #.
What if the link leaks?
Whoever opens it first gets the secret, and a view is used up. Add a passphrase and send it another way, so a leaked link alone opens nothing. Use Burn now if you sent it to the wrong place.
Why add a passphrase?
It mixes a second secret into the key. The recipient needs both the link and the passphrase, so you can send them through two different channels. A wrong passphrase never uses a view, but five wrong tries destroy the secret.
What happens when a secret expires?
It can no longer be opened. The encrypted data is removed the next time anyone creates a secret, and without the key it was never readable.
Can the operator read my secret?
Not from what the server stores: the key never reaches it. Still, whoever runs this site controls the code your browser runs, so only use an instance you trust.