Quick guidance to create, view, and manage ephemeral secrets.
Quick Start
- Open Create Secret. Type your secret and choose an expiry time.
- Enter a secret password which protects the secret.
- Click Create. Copy the generated link and share both the link and the password with the recipient.
- The recipient opens the link and supplies the password. The message decrypts in their browser and is destroyed on the server after viewing or
on the time speified.
How it protects your privacy
- Client-side encryption: Messages are encrypted in the browser before upload. The server never receives plaintext or the password.
- One-time view/Timed storage: After a successful decrypt the server is instructed to overwrite and delete the record or after a particular time.
- Minimal metadata: No accounts or sessions are used by default.
Best practices
- Share the generated link directly with the recipient. Do not post it to public channels.
- Keep your password safe. There is no recovery; losing the password means losing the message.
Troubleshooting
- Decryption failed
- Check that the recipient is using the exact link and the correct password.
- Message shows "Not found" or "Expired"
- The message was deleted (viewed or expired). Create a new secret if needed.
Security notes
This service aims to minimize traces. Absolute untraceability is impossible. Hosting providers and networks can observe traffic. For highest anonymity combine client-side encryption with Tor and strict server log policies.
Contact & feedback
If you need help or want to report an issue, include steps to reproduce and any non-sensitive screenshots. No personal data required.
© 2026 Siafu. All rights reserved.