How do I send a password to a contractor or external client?

Use a one-time encrypted link instead of email or Slack, since you don't control their systems. Set the view limit to 1 so the link is dead the moment they open it — even if it's later found in their sent-items or chat history, there's nothing left to read.

What is the safest way to share a password with a new hire?

Send onboarding credentials as a self-destructing link with a short expiration (an hour or two) rather than including them in a welcome email. If the credential needs to survive longer in case they start late, set a longer expiry but keep the view limit at 1.

Is it safe to text a password to a family member?

It's safer than plain SMS, which most phones back up to the cloud unencrypted. An encrypted link keeps the actual password out of the text thread entirely — you send the link, they view it once, and it's gone.

Can the server see my password?

No. The password is encrypted in your browser with AES-256-GCM before anything is sent. The decryption key lives only in the URL fragment — the part after the # — which browsers never transmit to a server. Vaulted stores ciphertext it cannot read.

Is this really free, and do I need to sign up?

Yes to both — sending a password is free with no account, no signup, and no limit on how many links you create.

What happens after the link is opened?

Once the view limit is reached (as low as 1) or the expiration passes, the encrypted record is permanently deleted from the server. There's no way to recover it afterward, by us or anyone else.

Send Password Securely

End-to-end encrypted, self-destructing password links — no account needed.

How it works

Sender

Types a secret

Browser encrypts

AES-256-GCM

Server stores

Encrypted blob only

Recipient decrypts

Key from URL fragment

Encryption happens in your browser — the server never sees plaintext.

The key lives in the URL fragment (#). Fragments are never sent to the server.

Set a view limit and expiration. Once reached, the secret is permanently deleted.

Why choose Vaulted?

Zero-knowledge encryption

Your password is encrypted in your browser with AES-256-GCM. The server only stores encrypted data — it never sees your plaintext.

Self-destructing links

Set an expiration time and view limit. Once reached, the password is permanently deleted from our servers.

View limits

Control exactly how many times your link can be opened — from a single view to 10 views.

No account required

Start sharing passwords securely in seconds. No signup, no login, no tracking.

The Worst Ways to Send a Password (and Why)

Email	Sits in inboxes and backup archives indefinitely, often forwarded without a second thought.
Slack or Teams	Searchable by anyone with channel access, and readable by admins long after the conversation is over.
SMS or iMessage	Backed up to the cloud by default on most phones, and visible to anyone who unlocks the device.
A plain shared link	Stays live forever unless someone remembers to revoke it — there's no built-in expiration.