Guide

One-time secret link: what it is and how it works

A one-time secret link is a web address that reveals a piece of sensitive text, such as a password or key, a limited number of times and then deletes it. Because the secret is not left in a chat or inbox, there is nothing for an attacker to find later.

Last updated: 2026-10-12The SecureVoult create-secret form with view limit, expiry and passphrase options

How a one-time link works

  1. You submit the secret and choose a view limit and expiry.
  2. The service stores the secret encrypted and gives you a random, hard-to-guess link.
  3. When the recipient opens the link, the secret is shown and the view counter increases.
  4. When the view limit or expiry is reached, the secret is permanently deleted and the link stops working.

When to use one

  • Sharing a password or recovery code with a teammate or client.
  • Sending an API key, token or database credential to a developer.
  • Passing along a Wi-Fi password, licence key or other short-lived information.
  • Onboarding a new employee with their first credentials.

What to look for in a secret-sharing tool

  • Secrets are encrypted before they are stored.
  • View limits and expiry you control.
  • Optional passphrase protection that is checked on the server.
  • Deletion that actually removes the data after viewing.
  • A clear explanation of who can read your data. Be wary of tools that make vague "zero knowledge" claims.

Limits to be aware of

A one-time link protects a secret in transit and at rest, but it cannot protect a recipient whose device is compromised, and anyone who obtains the link before the intended person can open it first. Send links directly to the recipient and use a passphrase for sensitive items.

Frequently asked questions

What happens after a one-time link is opened?

After the allowed number of views, the secret is deleted and the link shows that it no longer exists.

Can a one-time link be opened twice?

Only if you set a higher view limit. The default is a single view.

What if someone else opens the link first?

They would see the secret and the intended recipient would get an error. This is why you should send the link directly and consider adding a passphrase.

Share a secret now

Create a one-time, self-destructing link in seconds. No account needed.

Create a secret link

Related guides