Secretus — Share a Secret Autor: Secretus

Share a secret from anywhere in your browser — as a one-time, end-to-end encrypted link that self-destructs after it's opened.

Secretus is built zero-knowledge: your secret is encrypted on your device before anything is uploaded, and the decryption key travels only inside the link you share (in the URL fragment, which browsers never send to servers). Our servers store ciphertext they cannot read. Ever.

About the data permissions Firefox shows you
Firefox lists "personal communications" because your encrypted secrets pass through our servers on the way to whoever you share them with. We cannot read them — they arrive as ciphertext and the decryption key never reaches us. "Authentication info" covers signing in to your account.

WHAT YOU CAN DO
* Share a password, API key, or note as a one-time link in seconds
* Right-click any selected text → "Share selection securely"
* Attach files — encrypted on-device before upload (Business plan)
* Set an expiry: 15 minutes to 30 days
* Label your secrets and track them in "My secrets": see when a link was opened, and revoke unopened links instantly
* Keyboard shortcut: Ctrl+Shift+S (⌘⇧S on Mac)

SECURITY, FOR PEOPLE WHO CHECK
* AES-256-GCM encryption in the popup via the browser's native WebCrypto
* The decryption key lives only in the link fragment — never sent to, stored by, or visible to Secretus servers
* Every link works exactly once, then the ciphertext is destroyed
* Password sign-in uses SRP (Secure Remote Password): your password never leaves your device — not even to us
* No analytics, no tracking, no browsing-history access. The extension reads a page only when you explicitly share a selection from it
* Works only in regular windows (disabled in private browsing by design)

Requires a Secretus account: a 14-day free trial, then a paid plan. See secretus.app/offer.

Open the link on any device — no extension or app needed to receive a secret.