Hi Product Hunt 👋 , I'm Pedro, maker of Oncepad. It started with a habit I kept seeing (and had myself): someone needs a password or an API key, so it gets pasted into Slack, an email, or a Jira ticket… and it just stays there. Searchable, backed up, forwarded, forever. The hand-off is the weakest link, and most of us do it badly because the "proper" way is a hassle. One-time secret links fix the "forever" part, but most tools I tried put the decryption key inside the URL, so whoever sees the link (a colleague, a mail scanner, a chat's preview bot) can read the secret. That never sat right with me. So Oncepad splits it in two. The link carries no key at all, it's just an address, safe to drop anywhere. The key is derived from a passphrase that's generated for you (7 words, ~72 bits) and that you pass on a second channel: a text, a call, said out loud. Someone with only the link has nothing; someone with only the words has nothing. Encryption happens in your browser, the server stores opaque ciphertext in memory only, and the first reveal deletes it atomically. Nothing ever touches a disk. No accounts, no cookies, no logs, no trackers. Some choices I went back and forth on: the passphrase is generated rather than typed (human phrases are weak, and I didn't want a "password" field people would fill with "hunter2"); opening the link never burns the secret, only pressing reveal does, so link previews and scanners can't destroy it; and there's an "Erase it now" button for the "oh no, wrong person" moment. It's free, and I'd genuinely love feedback: what would make you reach for this instead of pasting into chat? What's missing for your team? Try it at https://oncepad.com, and thank you for looking. PS. file sharing is in the works, following the same level of security and anonymity.

Oncepad

Share a secret or file once. Encrypted in browser, then gone

Share a secret or file once. Encrypted in browser, then gone