Create a one-time secret link
A broad, browser-encrypted handoff for a password, note, key, code, or file
Short answer: OncePad is a free, no-account service for sharing a password, secret, or file through an end-to-end encrypted link. The link contains no decryption key, works once, and expires after 24 hours. Files may be up to 25 MB.
What a one-time secret link is
It is a short-lived address for encrypted data that the server will release once. With OncePad, the address itself is not enough to decrypt anything: the key is derived in the recipient's browser from a generated passphrase delivered separately. If the link is never used, it expires after 24 hours.
Create and share one
- Paste a password, private note, recovery code, API key, or
.envblock — or choose one file up to 25 MB. - OncePad encrypts it locally and gives you two separate pieces: a one-time link and a generated 7-word passphrase.
- Send the link through the convenient channel and the passphrase through a different channel.
- The recipient deliberately reveals it once. Link previews and mail scanners see only the passphrase screen and cannot consume it.
What it prevents — and what it cannot
A later search of the email, chat, or ticket finds no readable secret, and someone who captures only one channel cannot decrypt it. It cannot protect a compromised sender or recipient device, someone who intercepts both pieces, or a recipient who copies the revealed data.