Self-Destructing Encrypted Note
One-time AES-256 encrypted links — ciphertext and key ride in the URL fragment, never on a server
Write a secret note
Burn link
Write a message and generate a one-time encrypted link.
How burning works
The encryption key lives in the #fragment of the link, which browsers never send to any server. After you read the note once, the key is erased from the address bar and this browser. However, anyone who copied the full link can read the note too — share it like a secret, not a billboard.
Examples
Wi-Fi handoff
Note: the guest Wi-Fi password · no passwordLink …?n=…#k=… — readable exactly onceAfter the read, the address bar no longer contains the key.
About this tool
One-time encrypted messages with a visible mechanism: the ciphertext rides in the query string, the key rides in the URL fragment (#k=…) — and browsers never send fragments to servers. Opening the link wipes the fragment from the address bar, reveals the note on demand, and blocks re-decryption in that browser.
An optional password entangles its derived key material into the fragment key, so a leaked link alone is mathematically useless. The burn is honestly scoped: anyone who copied the full link holds the key too — the tool says so instead of pretending.
How to use
Write the message
Type the one-time secret; add a password for two-factor delivery.
Generate the link
Encryption is local; the key goes only into the link's fragment.
Share securely
Send the full link over a trusted channel — fragment and password together open it.
Read once
The recipient reveals the note; the fragment is gone and re-reading is blocked.
Use cases
One-time credentials
Codes and passwords that shouldn't live in chat scrollback forever.
Time-limited instructions
Instructions that self-destruct after the first read.
Common mistakes
Mistake:Treating burn as DRM
Fix:Anyone who copied the full link before opening can read it too; the burn protects against casual re-reading, not everything.
Mistake:Sending the link and password in the same message
Fix:Split channels: link by chat, password by voice.
Frequently asked questions
Related guides
References & standards
Related tools
AES Encryption
Encrypt and decrypt text with AES-GCM and a passphrase, fully in your browser. Uses PBKDF2 key derivation and the Web Crypto API — your data and keys never leave your device.
Basic Auth Generator
Generate an HTTP Basic Authentication header from a username and password. Produces the Authorization header and ready-to-use curl and fetch snippets. Runs fully client-side.
Bcrypt Generator & Verifier
Hash passwords with bcrypt and verify hashes — choose your cost factor (rounds 4–15), get a secure hash instantly, and check whether a password matches a hash. Runs entirely in your browser.
BIP39 Mnemonic Generator
Generate and validate BIP39 seed phrases locally for testing
Checksum Calculator
Compute file checksums (SHA-1, SHA-256, SHA-384, SHA-512) in your browser with the Web Crypto API
Client-Side File Encryptor
Encrypt any file with AES-256-GCM and PBKDF2 directly in your browser — no uploads, no accounts, wrong passwords fail loudly.