How it works
Encrypt on your device with AES-256-GCM before anything is stored. The recipient opens your link once — then that copy is removed from our servers.
Three steps
- Open the app and write your message. No account, no email — one upload per link you create.
- Write and encrypt. Keys are derived with PBKDF2-SHA256 (310,000 iterations). We never see plaintext.
- Send the link. Recipient opens once; ciphertext is deleted the instant it is served.
Who it’s for
- The founder sharing term sheet details before the deal closes
- The journalist receiving a tip that can’t be traced back through us
- The lawyer sending privileged material that self-destructs after read
- The executive during an acquisition when nothing should linger in logs
- Anyone who needs to say something that shouldn’t exist in writing forever
What makes this different
Signal protects your message. We protect that the message ever existed — on our side.
There are no accounts to freeze. No plaintext for us to hand over.
Limitations
No warranty. You are responsible for passphrase handling. TLS still terminates at our server, so ciphertext is visible in transit on the one fetch that delivers it. Refresh after open returns nothing by design.