Privacy First
No account. No ads. No tracking.
Link-only mode · no database
Paste a password or any sensitive text. Secret Sharing encrypts it in your browser and packs the encrypted bytes directly into the shareable link (after the #). Browsers never send the fragment to a server, so no database, no API, and no logs are involved. The recipient decrypts the link locally with a separate four-word passphrase.
Encryption happens entirely in your browser. Nothing on this page is sent anywhere - the encrypted result is packed into the link itself. How it works →
Your browser generates a 256-bit AES-GCM key locally and encrypts the text in-memory. The plaintext never leaves your device.
The encrypted ciphertext, IV, and salt are packed into the link itself (after the #). You receive that link plus a separate four-word decryption passphrase. No network request is made - nothing is sent to any server.
Send the link through one channel (email, chat) and the passphrase through a different one (SMS, phone call, in person). An attacker who compromises one channel still cannot read the secret.
When the recipient opens the link, their browser reads the encrypted bytes from the URL fragment (which is never sent to a server) and decrypts them with the passphrase. After a successful decrypt, the URL is cleared from this tab as a best-effort one-time gesture - but anyone who saved the link before it was opened can still read it.