Secret Transfer

End-to-end encrypted · one-time link

How this keeps your secret

  1. It is locked on your device. Your browser makes a random key and scrambles the text or file before anything is uploaded.
  2. The server never gets the key. The key is placed after the # in the link, and browsers never send that part to a server. All that is stored is scrambled data that cannot be read without the key.
  3. One read, then it is gone. The first person to open the link and press the button gets the secret. The stored copy is destroyed immediately, so the link stops working for everyone afterwards.

Encryption is AES-256-GCM with a 64-character random key (A-Z a-z 0-9) run through HKDF-SHA-256. The file name and type are encrypted along with the contents. Everything happens in your browser, and the code is right here on this page.