Share a secret securely
You send a password, a key or an access code as a link that works exactly once. Encryption happens in your browser, the server only sees ciphertext.
SharingSign in
Open ExoSeal and sign in. Only the person sending a secret needs an account. Whoever opens it later does not.
Enter the secret
Paste the password, key or text into “Send a secret”. Up to 50,000 characters fit. You can add a label for your “Sent” list. It is not encrypted, so do not enter anything secret.
Pick a lifetime
Choose how long the link stays valid: one hour, one day or seven days. After that the secret is deleted, even if nobody opened it.
Optionally add a password
With an extra password the link alone is worthless. Give the password to the recipient another way, for example by phone.
Create the link and send it
After “Create link” your browser encrypts the secret and shows the link. The key sits in the part after the #, which your browser never sends to a server. Send the whole link.
The recipient opens the link
The recipient clicks “Show secret” and sees the content. Right after that it is deleted and the link stops working.
Good to know
- Send the whole link, including the part after the #. Without it the secret cannot be decrypted.
- If someone else opened the link first, the secret is gone for the recipient. Treat it as compromised, change it and send a new one.
- A recipient can have a suspicious link deleted via “Report this link” without reading the content.
- Under “Sent” you see whether a link was opened, expired or reported. You can withdraw open links there.
Common questions.
01Can I withdraw a link afterwards?
Yes, as long as it has not been opened. Under "Sent" you withdraw the link, the secret is deleted and the link says "withdrawn". A link also expires after the first view or after the chosen lifetime. Reported links are deleted immediately.
02What happens if the recipient never opens the link?
When the chosen lifetime ends, the secret is deleted automatically, even if nobody opened it.
03Is the extra password required?
No, it is optional. It adds protection if the link ends up in the wrong hands. Give the password to the recipient through a different channel.
04How much fits into a secret?
Up to 50,000 characters. That is enough for passwords, keys, access codes and short texts.
Built by
ExostructionMaker of ExoSealExoSeal is built by Exostruction, a small software company from Bavaria. The source code is open (AGPL-3.0).This guide describes the default settings of ExoSeal. On self-hosted instances individual values may differ.