Docs

Quick start

1. Open the Create page and paste your secret.
2. Pick an expiration and optional password.
3. Copy the generated link and share it.
4. Recipient opens once — secret is destroyed.

Security model

Secrets are encrypted with AES-256-GCM in the browser. The encryption key is generated client-side and placed in the URL fragment, which browsers never transmit to the server. Our database only stores ciphertext, never plaintext or keys.

API

POST /api/v1/secrets
{
  "ciphertext": "<base64url>",
  "expires_in_minutes": 60,
  "password": null
}

REST + SDKs are on the roadmap. Want early access? Get in touch.