How it works

End-to-end encryption in four steps. Toggle to see the technical details.

Sender

Types a secret

Browser encrypts

AES-256-GCM

Server stores

Encrypted blob only

Recipient decrypts

Key from URL fragment

Encryption happens in your browser — the server never sees plaintext.

The key lives in the URL fragment (#). Fragments are never sent to the server.

Set a view limit and expiration. Once reached, the secret is permanently deleted.