EPHEMERALSECRETS
A secret that stops existing.
Paste a password, API key, token, or credential. Get a one-time link. The first person to open it sees the secret — then it stops existing. No account needed to receive one.
Create a SecretFree. Secrets auto-expire in 24 hours.
01 / WHAT IT IS
One transaction. Nothing else.
EphemeralSecrets turns any text into a one-time link. Paste a password, an API key, a token, a credential — anything you need to share exactly once. The link works for one viewer. After that, the content is destroyed. No copies, no retention, no recovery.
Built for developers, sysadmins, and anyone who needs to share a single credential without leaving a permanent record. It solves one problem: how do I give someone something secret without it living forever in a chat log?
02 / HOW IT WORKS
Paste, share, forget.
01 — Sign in and paste
Create an account with your email and password through the fleet's shared auth, then paste your secret into the dashboard.
02 — Get a one-time link
The tool generates a unique URL. Copy it and send it through your own channel — email, chat, a ticket, whatever you already use.
03 — It disappears
The first person to open the link sees the secret. After that, the page shows "This secret no longer exists." The content is gone.
03 / WHAT IT COSTS
Free because there is nothing to sell you.
EphemeralSecrets is free. No plans, no tiers, no subscriptions, no credit card. A single-purpose tool that costs nothing because it does one thing and charges for nothing else.
Secrets are limited to 100 KB each and auto-expire 24 hours after creation — even if nobody opened them. There is no way to extend the expiry, because the secret should not live forever in a database either.
04 / WHAT IT WILL NOT DO
This is not a secrets management platform.
A tool that does one thing cannot do the things it does not set out to do. Here is what EphemeralSecrets does not do, stated plainly so you know before you try:
- No team features, approvals, or roles — this is a single-person tool.
- No workflow, no integrations, no API for automation.
- No email — the fleet has no sender. You share the link yourself.
- No encryption of stored secrets in this version. Secrets are stored as plaintext in the database. Acceptable for a free tool sharing low-risk credentials; do not use for secrets whose exposure would be a reportable incident.
- No revocation — once a link is created, it cannot be cancelled.
- No audit log — the product tells you whether a secret was consumed but not by whom or when.
05 / SEE IT WORK
The first person to open it.
When someone opens your link, an atomic database update claims the secret in the same operation that reads it. If two requests arrive at the exact same microsecond, only one succeeds — the other gets a 404. The one-time guarantee is not enforced by convention; it is enforced by the database.
The recipient sees the secret on a dark page — the brand mark, the secret text in monospace, and a warning to copy it now. If the link expired or was already consumed, the page says so. The response is immediate: the secret either exists or it does not.
06 / A QUESTION YOU MIGHT HAVE
One-time means one time.
What happens if two people open the link at the same moment?
One person gets the secret. The other gets a 404. The atomic update ensures exactly one read — this is not a race you can win by being fast.
What if I forget to share the link?
The secret auto-expires in 24 hours. After that, the link returns a 410 Gone. The dashboard shows expired secrets so you can see what was missed.
Can I see who read my secret?
No. The dashboard shows whether a secret was consumed, but not by whom. This product does not track recipients.
Can I use this without creating an account?
To create a secret, yes — you need an account, because the secret is tied to your identity so you can see its status later. To receive one, no account is needed. The recipient simply opens the link.
SOMETHING TO TAKE WITH YOU