Share a password, API key, or private note with a link that works exactly once. Encrypted in your browser before it ever leaves your device.
Passwords and API keys sent over email or chat sit there indefinitely — in your sent folder, in the recipient's inbox, in backups neither of you control. A one-time secret link solves that: it exists just long enough to be read once, then it's gone.
The text is encrypted in your browser before it's ever sent to our servers. We store only ciphertext — never the key, never the plaintext.
Pick 1 hour for something you expect to be opened right away, or 7 days if the recipient might not check their messages immediately. Whichever you choose, an unopened link is deleted automatically once it expires.
A passphrase is a second piece of information the recipient needs, separate from the link itself. Send the link one way and the passphrase another — over the phone, in a different app — so a single compromised channel isn't enough to expose the secret.
Yes. The moment a secret link is opened, the encrypted data is deleted from our database — atomically, so even a retry or a second person opening the same link at the same time can't see it twice.
No. The text is encrypted in your browser before it's sent anywhere. The decryption key lives only in the link itself (after the # symbol), which never gets sent to our servers — only the encrypted ciphertext does.
You choose how long a link stays available — 1 hour, 1 day, or 7 days. If it's never opened in that window, it's automatically deleted and can't be recovered by anyone, including us.
It adds a second, separate requirement the recipient must know to unlock the secret — useful if you're sending the link over one channel (e.g. email) and the passphrase over another (e.g. text message), so no single intercepted message exposes the secret.
There's no way to recover it. We don't store the decryption key or keep a history of created links — that's the same privacy-first design as the rest of Passivato.