E
EONDENTALSECRETSHARE
ENCRYPTED ZERO-KNOWLEDGE

SHARE A SECRET

// ENCRYPTED IN BROWSER · VIEWED ONCE · DELETED FOREVER

01
SECRET CONTENT
REQUIRED
0 / 5000 chars
// content is encrypted with AES-256-GCM before leaving your browser
02
EXPIRY WINDOW
TIME TO LIVE
// unviewed secrets are auto-deleted by Redis TTL when the window closes
✓
LINK GENERATED
READY TO SHARE
Share link (copy before leaving — shown once)
Expires
Views allowed
1 — burns on open
Encryption
AES-256-GCM
Server knowledge
Zero — key in URL fragment only
HOW
HOW IT WORKS
ZERO-KNOWLEDGE
01
Client-side encryption
AES-256-GCM runs in your browser via the Web Crypto API. The server receives only ciphertext — never plaintext.
02
Burns on first view
The backend atomically fetches and deletes the record in one Redis Lua call. No second view is possible.
03
Key in URL fragment
The decryption key lives after the # in the share URL. Fragments are never sent in HTTP requests or server logs.

YOUR SECRET

// RETRIEVING — ONE-TIME ACCESS ONLY

···
DECRYPTING
IN PROGRESS
Fetching encrypted payload and decrypting locally…