Share a one-time secret

Encrypted in your browser before it ever leaves your device. The link works once, and expires after 24 hours either way.

Create link

How it works

1. The browser makes a random AES-256 key and encrypts the password before sending anything.
2. The server only stores the scrambled text, a random ID and an expiry time.
3. The link looks like https://belzak.uk/view.php?id=<id>#<key>. Browsers never send the part after # to the server, so the server can't decrypt anything. Even someone who steals the database can't.
4. When the recipient selects Reveal secret, the server returns the scrambled text and deletes it in the same locked database step. Two people clicking at once can't both get it.
5. Anything older than 24 hours is deleted on every request.
6. To keep bots out, your browser solves a small puzzle before creating a link. It runs locally, with no tracking and no third-party captcha service.