1h ago

Share a password without putting it in an email

Passwords and keys end up in email and chat more often than anyone admits. Once they are there, they sit in inboxes and backups long after they are needed. A one-time secret link is a better habit. You paste the secret into the page, and it is encrypted in your browser before anything is sent. The key never leaves your browser, and it lives in the part of the link that servers do not receive. You send the link to the person who needs it, and it stops working once it has been opened. Use it for temporary passwords, recovery codes and licence keys. Set the shortest expiry that still works for the person receiving it, and send the link on a different channel from anything that identifies the account. It takes about thirty seconds, and it removes a whole class of leaked credentials.