SecretShare
← Blog

Self-destructing messages: why a one-time link is safer

WhatsApp, Slack and email keep your secrets around. A self-destructing one-time link limits the leak after it is read.

By Rémy Sainsard

A self-destructing message is text the recipient can read only once. After it is opened, it is gone: no copy left on the server, no second look through the same link.

That matters as soon as you send a secret — a password, a Wi-Fi code, an API key, a 2FA recovery code — and you do not want it sitting in a Slack thread, an email, or a WhatsApp backup.

Why chat and email keep your secrets

WhatsApp, Slack, Discord, Teams and Gmail are built to keep messages. Even a so-called ephemeral message often lives on in history, an admin archive, a cloud backup, or the recipient’s phone.

Once you send the plaintext, you lose control:

  • a Slack admin can read a private conversation;
  • an email is copied across servers and “Sent” folders;
  • a screenshot or a search in the thread can surface the secret months later.

The risk is not only interception in transit. It is the copy that stays.

With Secret Share, you do not paste the secret into the chat. You create a one-time link:

  1. The text is encrypted in the browser (AES-256). The server never receives the message in plaintext.
  2. The decryption key travels in the URL, not in our database.
  3. The recipient opens the link, reads the secret, then the encrypted payload is deleted.
  4. Opening the same link again returns nothing.

Even if the Slack thread or email that holds the link is found later, the secret is no longer readable.

When to use a self-destructing message

  • share an office or Airbnb Wi-Fi password;
  • pass a login during onboarding;
  • hand over an API key or token until it is stored in a password manager;
  • send a 2FA recovery code without leaving it in WhatsApp.

For passwords specifically, see how to share a password securely.

In practice

Write the secret on secretshare.eu, copy the link, and send only the link on whatever channel you already use. Never paste the secret next to the link in the same message: that puts a permanent copy back in the chat you were trying to avoid.

——

To create a self-destructing message: secretshare.eu.