Can any server read my message?

No. The ciphertext and key are both in the URL. No server stores anything. The key is in the URL fragment, which browsers never send to servers.

What if someone intercepts the link?

They could decrypt. Share through a secure channel.

Is the message really deleted after reading?

Burn-after-reading is advisory — the recipient can still copy the text before the local flag triggers. There is no server to enforce deletion since nothing is stored server-side.

Can I set an expiration time?

Yes, but expiry is checked locally by the recipient. It is a courtesy flag, not server-enforced.

Secure Share

Free secure message sharing tool. Create encrypted, one-time-read messages. Everything stays in the URL — no server ever sees the plaintext or the key.

Free secure message sharing tool. Create encrypted, one-time-read messages. Everything stays in the URL — no server ever sees the plaintext or the key. Write the message you want to share securely in the text area. Click "Create Secure Link" to encrypt the message with AES-256-GCM. Copy the generated one-time link and share it with your intended recipient. The link self-destructs after the first read — the decryption key is only in the URL fragment. Messages are encrypted with AES-256-GCM in your browser. The encrypted data and key are both embedded in the shareable URL — nothing is stored on any server. "Burn after reading" and expiry are checked locally by the recipient.