Share a One-Time Secret with an Encrypted, Self-Destructing Link

A one-time secret link carries a password, API key, or file to one person, once — after that it is permanently deleted. 1time.io is free and open source, and encrypts everything in your browser using AES-256-GCM, so the server never sees your data. For a text secret that a few people need, choose 3, 5, or 10 views instead. No signup required.

Use it to share passwords securely, send database credentials to a contractor, deliver one-time file links up to 100 MB, or transmit any sensitive text without it lingering in Slack, email, or chat history.

End-to-end encrypted

AES encryption happens in your browser. The server only stores ciphertext.

One-time access

Links burn after reading by default. Once the last allowed view is used, the data is permanently deleted.

Auto-expiry

Links self-destruct after 1 hour to 30 days, even if nobody opens them.

One-Time File Sharing

Send encrypted files through one-time download links without exposing filenames or contents.

Password Generator

Create a strong, high-entropy password in your browser for critical accounts.

QR Code Sharing

Reveal a one-time QR code for nearby or cross-device password sharing.

CLI

Share secrets from your terminal. printf 'secret' | 1time send

Browser Extension

Select text on any page, right-click, and share it as an encrypted one-time link. For Chrome, Edge, and Brave.

How it works

Type or paste your secret above. 1time.io encrypts it with a unique key directly in your browser. You get a one-time link containing the decryption key in the URL fragment, which is never sent to the server. Share it with your recipient. Once they open it, the secret is decrypted locally and — on a default one-time link — permanently deleted from our servers.

How self-destructing links work

A self-destructing link — also called a one-time link, single-use link, or disappearing link — is a URL that reveals its content a limited number of times, normally just once. The recipient clicks, reads the secret, and the server permanently deletes the data; the same one-time URL becomes a dead 404 forever after. 1time.io generates these one-time links for free. Both text and file links work once by default, with small optional limits when a few people need access. End-to-end encryption happens in your browser, so even we never see what you share. Whether you call it a self-destruct link, a one-time secret link, or a disappearing message, the mechanism is the same: encrypt locally, share once, destroy when the last allowed view is used. Learn more in our guide to how self-destructing links work.

Perfect for sharing

Passwords, API keys, SSH keys, private notes, access tokens, WiFi passwords, two-factor backup codes, database credentials, configuration secrets, or any text you need to share securely just once.