Hey Product Hunt! I built SecretBolt to break my own habit of pasting API keys and .env files into chat, where they stay forever. You can try it on the homepage without an account: paste a secret, get a link that works once and expires in an hour. A free account adds the API: create a secret with one curl call, and let a teammate, a CI job or a Docker deploy load it straight into environment variables. A few things I tried to get right: - Every view is logged (time, IP, browser), the content never is - Secrets are encrypted at rest with AES-256-GCM, passphrases are stored only as bcrypt hashes - The recommended way to load a secret writes it to a private file you can read first, instead of piping it into eval. That change came straight from a reader's feedback To be upfront: it's server-side encryption, not end-to-end. The security section on the homepage explains exactly what that means, and an optional in-browser end-to-end mode is on the roadmap. SecretBolt is free during the pilot. Pro and Team plans are coming, and you can join the waitlist on the pricing page. I'm here all day, so ask me anything, especially the hard security questions.

SecretBolt

One-time secret links for developers, with an API

One-time secret links for developers, with an API