Paste the secret below — it is encrypted in this tab, and the link you get opens exactly once.
Scan this on the other device:
The key exists only in this link — we never receive it and cannot bring it back.
Got a code? Fetch it here:
The link works on its first opening and never again — and «opening» is counted strictly. The instant the server hands the ciphertext out, it deletes it; we don't wait to hear whether the reader decrypted it successfully, because a service that waits can be lied to and made to serve the secret twice. One-time means one time even when that's inconvenient.
An unopened secret self-destructs after 10 minutes. That's short by the standards of secret-sharing sites — deliberately. A secret link that stays live for days is a secret sitting in someone's inbox, waiting. Ten minutes covers «I'm sending it to you right now», which is what a one-time secret is actually for, and leaves nothing lying around for later.
Ciphertext, and only ciphertext. The secret is encrypted in your browser
on this page (AES-256-GCM), and the key rides in the fragment of the link —
after the # — which no browser sends to any server. This page
loads no network scripts at all, so the code doing the encrypting is all in
the document you already received.
Nothing to sign up for on either end, no ads, no third-party trackers, and no archive of your secrets anywhere — there is nothing to archive. The fastest way to share a secret message is also the shortest: paste, throw, hand over the link.