Some Secrets Are
Meant to Die.
Send messages that self-destruct. Lock confessions to a future date.
Set a dead man’s switch for the things you can’t say while alive.
ඔබේ රහස් — ආරක්ෂිතව, නිශ්ශබ්දව, සදාකාලිකව.
What We Offer
One Vault. Three Defences.
Three different tools for three different kinds of secrets. All encrypted. All irreversible.
Burn After Reading
Generate a one-time link. The instant it’s opened, the message is permanently destroyed — wiped from every server, every log, every trace.
- AES-256 encrypted in transit
- One read, then destroyed
- Optional media attachment
Sealed Until a Date
Lock your message to a future date and time. The recipient sees a live countdown — unable to read it until the vault opens exactly when you decide.
- Precision time-lock
- Live countdown display
- Still burns after reading
Dead Man’s Switch
Upload your final confessions. Set a heartbeat interval. If you stop checking in, your trusted nominees automatically receive your message.
- Configurable heartbeat timer
- Multiple nominated recipients
- Grace period warning emails
Live Vault Stats
The Process
How It Works
Write Your Secret
Type anything — a password, a confession, private instructions. Nothing leaves your browser unencrypted.
Encrypted Instantly
AES-256-CBC transforms your message before it touches the database. The plain text is gone the moment you click submit.
One Link. One Chance.
The recipient opens it once. The server deletes the record atomically at the same instant. No recovery. No second chance.
Zero Compromise
Built Paranoid by Design
We assumed from day one that we could be breached. So we built it so a breach reveals nothing useful.
AES-256-CBC
Every message is encrypted with AES-256-CBC before it hits the database. Plain text never touches the disk.
Bcrypt Passwords
Passwords hashed with bcrypt (PASSWORD_DEFAULT). Raw credentials never written to any log or column.
CSRF Protected
Every form uses a cryptographically random per-session CSRF token. Cross-site attacks are blocked at every action.
No Plaintext Logs
Logs are configured to never capture secret content. We cannot reconstruct what you wrote, even under legal order.
Hardened Sessions
HTTP-only, SameSite=Lax cookies. Strict session mode. Idle timeout 1 hour. Session ID rotated every 5 minutes.
Atomic Self-Destruct
Burn secrets are deleted inside a DB transaction on first read. There is no window for a race-condition second read.
Premium Features
Attach Files. Add Media.
Images, audio, and video stored encrypted outside the web root — served once when the recipient opens the link, then destroyed alongside the message.
Your First Secret
Is Already Waiting.
No account required to send a secret. Create one in 10 seconds. Register to save secrets to a dashboard and configure your Dead Man’s Switch.
Free forever for text secrets · රහස් ශ්රී ලංකාවෙන්