SealedInbox one-time note
Share a password securely with a one-time note
Share a password securely: as a one-time note it is gone after the first read. Encrypted in your browser, no account, not left in your chat history.
Create a one-time noteWhy chat and email are a poor place for passwords
A message containing a password often stays in the history, in backups and on several devices for years. Anyone who later gains access to the account finds it there.
How to send a password with a one-time note
The note replaces the chat entry with a link that leads nowhere after the first read.
- Open the one-time note and type the password.
- Choose a short expiry, for example 1 hour. After that the note is deleted even if nobody read it.
- Optionally set an extra password and tell it to the recipient another way, for example by phone.
- Click “Create link” and send the link to the recipient.
- The recipient clicks “Show note” and sees the password exactly once. After that the note is deleted.
What else helps
Change the shared password after the first login. If possible, send username and password in separate notes or through separate channels.
When a one-time note is not enough
If several people need lasting access to the same password, a password manager with sharing fits better. The note transfers a password once; it does not manage one. It also cannot stop the recipient from copying or writing down the text.
Questions
Can I send the link by email or chat?
Yes, the link reveals the password only after the click on “Show note”. It does contain the key, though: anyone who reads the link on its way and opens it first can read the note. The recipient would then see “already read or expired”, and you know something went wrong. An additional password that you share another way closes that gap.
How many wrong note passwords can the recipient try?
Five. After the fifth failed attempt the note is deleted.
Can SealedInbox see the password?
No. The text is encrypted in your browser with AES-256-GCM and we store only the ciphertext. The key sits behind the # in the link, which the browser does not send to the server.
Can I withdraw a note before it is read?
Yes. While the page with the generated link is still open, “Delete note now” removes the note immediately.