Skip to main content
Toolzum

Secure Note Sharer

Share secrets securely via self-decrypting note links — AES ciphertext in the URL fragment, key in the link query. Send passwords without trusting inboxes — local crypto-js AES, free, no signup.

Runs on CryptoJS

100% Local Browser Native

How to Use the Secure Note Sharer

1. Write the secret

Passwords, keys, credentials.

2. Set password, get link

Blank password auto-generates an 8-char key in the link.

3. Share separately

Anyone with the full link auto-decrypts — guard it.

Similar Tools You Might Need

See all

Frequently Asked Questions

How do servers never see content?

AES encryption happens in your browser with crypto-js; the ciphertext rides in the URL fragment (#note=), which browsers never send to servers. But the key travels in the link query (?key=), which servers and logs can see — and opening a link auto-decrypts, then wipes the fragment from the address bar. Treat the full link as the secret.

What if someone intercepts the link?

Without the password it's unreadable AES ciphertext. Share passwords out-of-band (call, different channel) — link plus password together defeats the purpose.

Burn after reading?

No server means no remote deletion — anyone with link + password re-reads forever. Rotate exposed secrets after one-time shares.

Is note content uploaded?

No plaintext is stored server-side, but the key travels in the link query (?key=) so servers and logs can see it — never use these links for banking or high-stakes secrets. A blank password auto-generates an 8-character key.

Last updated October 2026