Receive a secret

Someone sent you a SecureNote link. It opens a note that was encrypted in their browser — nobody in between, us included, has been able to read it. It can be opened exactly once, and you don't need an account or a sign-in.

Step by step

Open the link. You'll see a Reveal secret button, not the secret. That's deliberate: link previews and virus scanners can't "open" the note for you by accident, because nothing is consumed until you click.
Click Reveal secret. This is the moment the note is handed over and destroyed on our end — it can only happen once.
If the sender set a passphrase, you'll be asked for it before anything shows. Enter it and hit Decrypt.
Copy what you need before you leave — the text, and any attached files. Once revealed, the note is already gone from our servers, so reloading won't bring it back.

If something goes wrong

Wrong passphrase? Just try again on the same screen — a wrong passphrase doesn't burn the note. Only don't reload the page: by then the encrypted note exists only in your browser, and a reload loses it for good.
"This secret is no longer available"? It was either already opened or it expired. Ask the sender for a new link — and if you never opened it yourself, tell them so: either it simply expired, or someone else got to the link first.

Treat the link like the secret itself

Anyone who has the whole link can open the note (once). Don't forward it, and don't leave it lying around after you've used it.

Curious what makes this safe? See how it works & security.