Share a secret. Once.
Put a credential behind a one-time link.
The recipient opens it,
copies it, and the secret is destroyed.
Long after the chat message is forgotten,
there is nothing left to find.
Give each secret a name and a value. One link holds up to ten of them.
Send the link anywhere. You decide how long it lives, from an hour up to 30 days, and how often it opens.
After the last open the secret is wiped. Reloading the link shows a friendly dead end, not your password.
One open by default. The ciphertext is destroyed after the last allowed open, on expiry and on withdraw.
Expiry from 1 hour to 30 days. Opens: once, a few times, or unlimited until it expires.
Get a notification the moment your link is opened, on by default if you want it to be.
Every link you made is in History with its status. Withdraw one and it stops working on the spot.
Agents drop a secret off at a public endpoint and hand you the link, so it never touches the chat window. Machines can pick up as JSON.
How agents hand off secrets →Link previews and mail scanners cannot burn a secret: nothing is revealed without a deliberate click.
Each secret is encrypted with AES-256-GCM using a key derived from the link itself. The server keeps only a hash of that link, so a copy of the database cannot reveal a single secret.
Read the full security model →