Request a secret
Need a password or key from someone else? Send a request link. They answer in their browser, without an account, and only you can open the answer.
RequestsOpen a new request
Sign in and choose “New request”.
Write the question
Under “What do you need?” write what you expect, for example “Credentials for the staging server”. The other person sees this in plain text, so do not put anything secret here.
Pick a time frame
Decide how long the person can answer: 1, 3, 7, 14 or 30 days.
Set a passphrase
The passphrase protects your private key. It has at least 10 characters, ideally a long sentence. There is no recovery: without the passphrase the answer is lost.
Send the link
Send the link to the other person. It is shown only now. The part after the # makes sure the answer is encrypted for you, and it stays in the browser.
The person answers
They open the link, see your question and answer. The answer is encrypted in their browser and can be sent only once. No account needed.
Open the answer
Under “Requests” you see the status. Open the request and enter your passphrase to decrypt the answer. It can be opened only once.
Good to know
- With mail or a webhook set up you learn that an answer arrived. The content is never in the message.
- Entering a wrong passphrase does not cost you the answer. You can try again.
- You can delete requests at any time under “Requests”.
Common questions.
01Does my customer need an account?
No. They open the request link and answer directly in the browser.
02What happens if I forget my passphrase?
Then the reply is lost. There is no recovery, because only you can decrypt it with your passphrase.
03How long are replies stored?
A reply is deleted when it is opened or after 7 days. The request itself stays until you delete it or 30 days after it ends.
04Can the server read the reply?
No. It is encrypted in your customer's browser and the server only stores ciphertext.
Built by
ExostructionMaker of ExoSealExoSeal is built by Exostruction, a small software company from Bavaria. The source code is open (AGPL-3.0).This guide describes the default settings of ExoSeal. On self-hosted instances individual values may differ.