How a private link works
- Your browser creates a random 256-bit key and encrypts your text with AES-256-GCM.
- Only the encrypted text is uploaded. The key goes into the part of the link after
#, which browsers never send to any server. - The person you send it to opens the link. Their browser reads the key from the link and decrypts the text.
When to use it
Use a private link to send a Wi-Fi password, a server login, an API key or anything you wouldn't want sitting in a chat history forever. Set it to expire after a day, limit it to one view, or add a password you share another way.
Questions
Can you read what I send?
No. We store only ciphertext. The key is in the link, and the part after # never reaches our server.
What happens when it expires?
The encrypted text is deleted from our database within a minute, and the link shows that the message no longer exists.
Will a chat app's link preview use up the view?
No. The page only fetches the message when someone presses Open, and opening also needs the key from the link.
Can I delete a link early?
Yes. After creating a link, copy the delete link and keep it. Opening it lets you remove the message at any time.