Sending a secret by link

A send is a copy, not an access: the link opens without a vault and without an account, for someone outside your team. The secret is encrypted in your browser, and the key travels in the link, after the # — that part never reaches the server.

Create a link

1. Go to Sends.
2. Under Share a secret by link, type it in Secret to share. Only text; files cannot be sent.
3. Choose Expires in: 1, 3, 7 or 30 days.
4. Leave Open once ticked so the link works a single time, or untick it so it works until it expires.
5. Optionally, set an Extra password (optional).
6. Press Create link and copy the link.

Copy the link right away. The key is not stored anywhere, and once that box is gone the link cannot be rebuilt.

With an extra password, the link alone does not open the secret, and neither does the password alone. Send them by different means — for example, the link by email and the password by phone.

What the other person sees

A page titled “Someone shared a secret with you”. The page first only checks that the link exists, without using it up, and a chat app's link preview does not use it up either. The secret is shown when they press Reveal the secret, after typing the password if there is one.

A wrong password counts as an attempt, so a one-time link may be spent by it. A link that expired, was opened or was revoked shows the same message in all three cases, on purpose.

Your links

Under Your links you see how many times each one was opened and when it expires. Revoke ends a link before its time.

Once someone opened it, they have the secret. Revoking stops the next opening, not the one that already happened.