Paste a password, API key or private note. You get a one-time link that opens once, then deletes itself. Free, and no sign-up for you or the person you send it to.
Or as soon as it’s opened, whichever comes first.
The recipient must type it to open the secret. Send it through a different app.
Encrypted in your browser. No sign-up needed.
Free. No account to send or to read. We can’t see what you share.
Four steps, and your secret never sits anywhere it could be read later.
Type or paste a password, key or private note into the box.
Your browser encrypts it before anything is sent. We only ever receive scrambled data.
The key to unlock it is inside the link itself. Send it by chat, email or text.
When your recipient opens it, we delete our copy. The link never works again.
Because a message doesn’t disappear when the person has read it.
A readable copy stays in:
Anyone who later gets into one of those accounts can scroll back and find it.
After it’s opened, a readable copy stays in:
The chat still shows a link, but the link leads nowhere. There’s nothing left to find.
For developers and security teams who want the details.
# in the link. Per RFC 3986, fragments are not sent in HTTP requests, so the key never reaches Ennote servers or access logs.| Chat or email | Typical pastebin | Ennote one-time link | |
|---|---|---|---|
| Encrypted before it leaves your device | No | Rarely | Yes, AES-256-GCM |
| Service can read it | Yes | Usually | No, key stays in the link |
| Deleted after first read | No | Sometimes | Yes, always |
| Optional passphrase | No | Sometimes | Yes, PBKDF2 |
| Account needed | Both people | Usually not | No one |
Ennote also offers team password vaults and secret delivery to Kubernetes workloads, with no sidecars.