Encrypted one-time notes
Create an encrypted one-time note
Write confidential text and receive a private link. Encryption happens in this browser; the encrypted server copy is destroyed after its first retrieval.
Create a private link
Only the encrypted container is uploaded. The plaintext, password and decryption key never leave this browser.
The private link is ready
Copy the complete link and send it to the recipient. Its fragment contains the decryption key; the server never receives that fragment.
If you added a password, send it through a separate channel.
Encrypted copy stored:
Zero-access encryption
How it works
Write and encrypt
Your browser generates a random key and encrypts the note locally.
Send the complete link
The identifier and key are kept in the URL fragment. The key is not sent to the server during normal page loading.
Retrieve once
After confirmation, the server deletes and returns the encrypted record in one operation. The browser then decrypts it locally.
Detailed answers
Questions and answers about one-time notes
How encryption, one-time retrieval, passwords, retention, notifications and technical data work.
What is an encrypted one-time note?
It is a message stored on the server only as an encrypted container. The recipient can retrieve that container once; it is then removed before the browser decrypts the content.
Can the server or an administrator read the note?
No. The browser encrypts the plaintext before upload. The decryption key stays after the # symbol in the private link, and URL fragments are not sent to the server in an HTTP request.
What exactly happens when the recipient opens the link?
With the confirmation screen enabled, nothing is retrieved until the recipient selects “Read and destroy”. The server then deletes and returns the encrypted container in one atomic operation. Decryption happens locally in the browser.
Why should an additional password be sent separately?
A password provides a second secret independent of the link. Sending it through another channel reduces the risk that someone who obtains the link can also decrypt the note.
What happens if the password is wrong?
The server copy has already been removed, but the current browser tab keeps the encrypted container in memory so the recipient can try the password again. Closing or reloading the page loses that copy.
How long can an unopened note be stored?
The creator can choose one hour, 24 hours, 7 days, 30 days or storage until the first retrieval. A timed note becomes unavailable after its deadline. An unlimited note remains encrypted until it is retrieved.
Can a destroyed or expired note be recovered?
No. There is no recovery route or backup of the plaintext. Administrators cannot restore the encrypted record after deletion and never possess the decryption key.
What data is recorded besides the encrypted note?
Security and abuse-prevention logs can include IP address, session, browser and device signals, language, referrer and approximate Cloudflare network data for 30 days. Note text, passwords and decryption keys are excluded.
How does the destruction notification work?
If the creator enters an email address, the service sends a confirmation after the encrypted record is retrieved and deleted. The notification contains the optional note title, but never the note text, password or decryption key.
What should not be sent through a one-time note?
Do not use it as a substitute for an approved password manager, regulated document exchange or long-term secure storage. Before sending highly sensitive material, verify the recipient and use an additional password through a separate channel.
Ready to create a private note?
Return to the form, enter the text and choose the settings that match the situation.