Frequently Asked Questions
Everything you should know before sharing sensitive data.
Where is my secret stored?
Secrets are encrypted on the server and stored temporarily in Redis with a TTL (1h, 24h, or 7d). The encrypted record is deleted after first successful reveal or when TTL expires.
Do you store secret text in plaintext?
No. Secret content is encrypted with AES-256-GCM before storage. We do not intentionally persist plaintext secret content in storage.
How does one-time viewing work?
Each secret link can be revealed only once. After successful viewing, the encrypted payload is permanently deleted from the server.
Can I protect a secret with a passphrase?
Yes. You can add an optional passphrase at creation time. The receiver must enter the correct passphrase before the secret is revealed.
What happens if the link is never opened?
The secret automatically expires based on the selected TTL (1 hour, 24 hours, or 7 days) and is removed when it expires.
What should I share through 1TimeSekret?
Use it for passwords, API keys, database credentials, SSH material, and other short-lived sensitive text that should not remain in chat history.
Does viewing the page consume the secret immediately?
Only a successful reveal consumes the secret. Simply opening the page does not destroy it until reveal conditions are met.