Browser-Based Encryption
Messages are encrypted locally with AES-GCM before upload, so plaintext is never stored by SecretLink.
Browser-based AES-GCM encryption
Share encrypted messages with secure, private links
SecretLink encrypts sensitive text directly in your browser before it is sent. Share passwords, API keys, private notes, and confidential details with optional password protection, expiration, and one-time viewing.
Private message sharing by design
Only encrypted ciphertext and essential delivery settings reach SecretLink servers. The decryption key remains in the link fragment, which browsers do not send in web requests.
One-Time Secret Links
Choose a self-destructing message that can be opened once, or set an expiration time that fits the information you are sharing.
Password Protection
Require a separate password before encrypted content can be retrieved, adding protection when a link reaches the wrong person.
How to send an encrypted message
Create a secure message link in three straightforward steps. No encryption software or browser extension is required.
- Step 1
Write the sensitive text
Enter the information you need to share and choose a password, expiration time, or one-time access.
- Step 2
Encrypt it in your browser
SecretLink creates a random key locally and sends only encrypted ciphertext to the server.
- Step 3
Share the private link
Your recipient opens the complete link and their browser decrypts the message locally.
Share information that should not live in chat history
SecretLink is designed for short, sensitive text such as passwords, recovery codes, API keys, access instructions, private notes, and confidential handoff details.
- Passwords
- Recovery codes
- API keys
- Private notes
- Access details
- Confidential handoffs