Secure Password Share
Securely share passwords via encrypted links. Generate a time-limited, burn-after-reading link — recipient decrypts with a key in the URL hash that never reaches the server.
Frequently asked questions
How is this secure?
Passwords are encrypted client-side with AES-256-GCM. The decryption key is stored in the URL fragment (after #) which is NEVER sent to the server. Only the encrypted data goes to the server.
How does "burn after reading" work?
When enabled, the link is permanently deleted the moment it's viewed — even if it hasn't reached its expiry time. The password can only be retrieved once.
Can the server see my password?
No. The server only stores encrypted data. The encryption key exists only in the URL fragment (after #), which browsers never send to the server.
What happens if the link expires?
After the expiry time, the encrypted data is automatically deleted from the server. Without the server data, the encrypted link becomes useless.