Encrypted · Single-use · Self-destructing
How to send a password securely
Create an encrypted link. Share it. The password self-destructs the moment it's read. No trace in chat history, no server logs, no recovery.
Your link — copied to your clipboard
Anyone with this link can read the note until it's destroyed. The key after the # never reaches our server.
Free, no sign-up. Need a password or a longer life? More options
Why the obvious methods are a problem
Slack / Teams message
Stored permanently in both users' chat history, searchable by workspace admins, accessible to third-party integrations, and retained in audit logs. Deleting the message doesn't remove it from Slack's servers or existing logs.
Lives in sent items on your end and inbox on theirs — indexed, searchable, and replicated across every device they use. Breaching either email account exposes the password days, months, or years later.
Google Doc / Notion
Stored in plaintext. Edit history means even 'deleted' content is recoverable. Anyone with the doc link or workspace access can read it. Sharing permissions are easy to misconfigure.
WhatsApp / iMessage
Messages are retained on both devices, backed up to iCloud or Google Drive (often in plaintext), and synced across linked devices. Expiring messages only reduce the window — they don't guarantee destruction.
The secure way: a self-destructing encrypted link
A single-use encrypted link works like a sealed envelope that incinerates itself the moment it's opened. The password exists in transit for seconds. Once read, the link stops working — permanently.
- 1
Type the password into VoidNote
Paste the password, API key, or credentials. Optionally set a password on the note — the recipient needs both the link and that password, so share the password through a separate channel (phone call, in person).
- 2
Your browser encrypts it before sending
AES-256-GCM encryption runs in your browser. The decryption key sits in the link after the #, which browsers never send to us, and VoidNote's servers store only ciphertext.
- 3
Paste the link into Slack, email, or anywhere
The link contains the key, so send it over a channel you trust. When your recipient opens it, their browser fetches the ciphertext and decrypts the password on their device, and the note is destroyed.
How methods compare
| Method | Encrypted in transit | Server sees plaintext | Leaves permanent record |
|---|---|---|---|
| Slack | Yes (TLS) | Yes | Yes |
| Sometimes | Yes | Yes | |
| iMessage | Yes (E2E) | No | Yes — on device |
| Password manager share | Yes | Yes | Until revoked |
| VoidNote | Yes (AES-256-GCM) | Never | Destroyed on read |
Automating secure password delivery
Need to deliver secrets programmatically — to a CI runner, an AI agent, or an onboarding script? Use the CLI or SDK. The recipient reads the note once; it self-destructs. No secrets in config files, no plaintext in logs.
# Create a self-destructing note from the command line
echo "db-password-here" | voidnote create --api-key vn_... --views 1 --quiet
https://voidnote.net/n/a1b2c3…#e5f6a7…
# Recipient fetches it — note is immediately destroyed
voidnote read "https://voidnote.net/n/a1b2c3…#e5f6a7…"
db-password-here
# note destroyed — link is dead
Frequently asked questions
What if the recipient never opens the link?
Notes expire after the lifetime you choose — up to 7 days without an account, 30 with a free one. After that, the encrypted record is permanently deleted, whether it was read or not.
Can I include more than just a password?
Yes. You can include usernames, hostnames, ports, database names, API endpoints — anything. For sending a full set of environment variables at once, create a note with all of them or use Void Stream to pipe a batch of secrets through a live encrypted channel.
What if the link is intercepted?
If an attacker intercepts the link and opens it first, your recipient gets an error — the note is gone. This tells you the channel is compromised. Rotate the credential and send a fresh note. For high-sensitivity secrets, set a password on the note (shared out of band) so the link alone is useless without it.
Do I need an account?
No account needed to create and share a note. A free account lets notes last up to 30 days and 100 views, and keeps a history of the notes you've sent (metadata only — content is stored only as ciphertext).
Send your first password securely
Takes 10 seconds. No account required. Nothing stored in plaintext — ever.