Self-Destructing Encrypted Note
One-time AES-256 encrypted links — ciphertext and key ride in the URL fragment, never on a server
Examples
Wi-Fi handoff
Note: the guest Wi-Fi password · no passwordLink …?n=…#k=… — readable exactly onceAfter the read, the address bar no longer contains the key.
About this tool
One-time encrypted messages with a visible mechanism: the ciphertext rides in the query string, the key rides in the URL fragment (#k=…) — and browsers never send fragments to servers. Opening the link wipes the fragment from the address bar, reveals the note on demand, and blocks re-decryption in that browser.
An optional password entangles its derived key material into the fragment key, so a leaked link alone is mathematically useless. The burn is honestly scoped: anyone who copied the full link holds the key too — the tool says so instead of pretending.
How to use
Write the message
Type the one-time secret; add a password for two-factor delivery.
Generate the link
Encryption is local; the key goes only into the link's fragment.
Share securely
Send the full link over a trusted channel — fragment and password together open it.
Read once
The recipient reveals the note; the fragment is gone and re-reading is blocked.
Use cases
One-time credentials
Codes and passwords that shouldn't live in chat scrollback forever.
Time-limited instructions
Instructions that self-destruct after the first read.
Common mistakes
Mistake:Treating burn as DRM
Fix:Anyone who copied the full link before opening can read it too; the burn protects against casual re-reading, not everything.
Mistake:Sending the link and password in the same message
Fix:Split channels: link by chat, password by voice.
Frequently asked questions
Related guides
References & standards
Related tools
AES Encryption
Encrypt and decrypt text with AES-GCM and a passphrase, fully in your browser. Uses PBKDF2 key derivation and the Web Crypto API — your data and keys never leave your device.
Basic Auth Generator
Generate an HTTP Basic Authentication header from a username and password. Produces the Authorization header and ready-to-use curl and fetch snippets. Runs fully client-side.
Bcrypt Generator & Verifier
Hash passwords with bcrypt and verify hashes — choose your cost factor (rounds 4–15), get a secure hash instantly, and check whether a password matches a hash. Runs entirely in your browser.
BIP39 Mnemonic Generator
Generate and validate BIP39 seed phrases locally for testing
Checksum Calculator
Compute file checksums (SHA-1, SHA-256, SHA-384, SHA-512) in your browser with the Web Crypto API
Client-Side File Encryptor
Encrypt any file with AES-256-GCM and PBKDF2 directly in your browser — no uploads, no accounts, wrong passwords fail loudly.