What this tool does

One-time secret lets you share a sensitive value through a link that works exactly once. You type the secret, create the link, and send it to one person. When they open it and click Reveal, the secret appears a single time and is then permanently destroyed. Anyone who opens the same link afterwards sees nothing.

How it stays private

The secret is encrypted in your browser before anything is sent. The decryption key is placed in the URL fragment—the part after the # sign—which browsers never send to a server. We only store the encrypted blob, and we delete it on first reveal or at expiry. Because the key stays in the link and never reaches us, we cannot read your secret, even if we wanted to.

When to use it

Use it to hand off a password, API token, or 2FA backup code, or to share a private note safely. It is far better than email or chat, which keep a permanent copy in message history where it can be searched, forwarded, or leaked later. A one-time link leaves nothing behind once it is opened.

Important cautions

The link can be opened only once. If a link previewer, a chat unfurler, or the wrong person opens it first, the secret is consumed and the intended recipient gets nothing. Send the link over a channel the right person controls, and warn them it is single-use. Always copy the full link, including everything after the #; if that part is cut off, the secret can never be decrypted.