SecretNote.eu
Create

Send a private file that self-destructs

text image draft - not sent
Drop files here or paste from clipboard

Any file type. Encrypted in your browser before upload.

Loading file limits...
delete after download- 3 days- tap to reveal
01 Duration if nobody downloads it, the ciphertext self-destructs after this window.
02 Destruct options when does the server forget it ever existed.
03 Directly open and decrypt decrypt automatically when the recipient opens the link, without clicking the confirmation button.
how it stays private
end-to-end encrypted AES-256, in your browser zero-knowledge no account

How can I share files securely?

Three simple steps to send encrypted files that delete after download.

01Drop in your files.

Files are encrypted in your browser with AES-256 before anything touches the network.

your-file.pdf…
→ aes256(•) → ciphertext
Screenshot: a file attached and ready to encrypt on SecretFile Screenshot: a file attached and ready to encrypt on SecretFile

02Send the link.

The URL carries the decryption key after the #, which browsers never send to a server.

https://secretnote.eu/en/f3b1#c9a2…4d7e
Screenshot: the one-time download link ready to share Screenshot: the one-time download link ready to share

03It disappears on download.

Server deletes the ciphertext the moment the file is downloaded. No backups, no logs.

ciphertext — f3b1
status: destroyed
Screenshot: the file is gone after being downloaded Screenshot: the file is gone after being downloaded

Why use SecretFile to share sensitive files?

Zero-Knowledge Architecture

AES-256 encryption runs entirely in your browser before anything leaves it. The decryption key is embedded in the URL fragment, which browsers never transmit in HTTP requests.

One-time Download

When the recipient downloads the file, the ciphertext is fetched, decrypted locally, and immediately deleted from the server. No backup, no log, no cached copy.

Completely Anonymous

No account, no email, no personal information. Only encrypted ciphertext, a random ID, and an expiry are stored, none tied to any identity.

What you can share with SecretFile

Any file type, up to the size limit. The server only ever holds opaque ciphertext.

Documents and PDFs

Contracts, invoices, ID scans, tax forms, medical records - send sensitive paperwork without leaving copies in email threads.

Images and screenshots

Photos of credentials, signed papers, or any image that should not persist in chat history or cloud galleries.

Code and config files

SSH keys, .env files, database dumps, kubeconfigs - move secrets between teammates without committing them anywhere.

Archives and backups

ZIPs, encrypted backups, project bundles. The recipient downloads once, and the link is permanently deleted.

frequently asked

Frequently asked questions

Common questions about encrypted file sharing and one-time download links.

Yes. Files are encrypted with AES-256 directly in your browser before any data is sent to the server. The decryption key is embedded in the link fragment, which is never transmitted to the server. This means the server stores only ciphertext and has no way to read your files.
Any file type is accepted - documents, archives, images, executables, or anything else. You can share up to 20 files at once with a total size of 50 MB per share. Clipboard paste support depends on what file types the browser exposes from the clipboard, which varies by operating system.
Files are stored until the link is opened or until the expiration time you set in Options is reached, whichever comes first. The default expiration is 3 days for unviewed links. Once the recipient opens the link the encrypted files are permanently deleted from the server.
No. SecretFile uses one-time delivery. After the link is opened and the files are decrypted the encrypted data is deleted from the server and the link stops working. If you need to share the same files again you will need to create a new share.
Yes. In the Options panel before creating the link you can set a password. The recipient must enter the correct password before the files are decrypted and made available for download. This adds a second layer of protection on top of the AES-256 encryption, which is useful if you need to send the link over an insecure channel.
If the link is never opened, the encrypted files are automatically deleted when the expiration timer runs out. The default is 3 days. You can set a shorter or longer timer in Options before creating the link. Available options range from 1 hour to 30 days. After expiry the link stops working and the files are permanently deleted.
No. SecretFile is designed around anonymity and zero-knowledge principles. The sender has no dashboard, no notification, and no visibility into whether the link was opened. Once the link is created and shared, the sender has no further connection to the share. This is intentional - the service does not track access events.
Yes. SecretFile is operated by RapidFoundry LTD, a company based in the European Union. Files are stored as encrypted ciphertext only, with no personally identifiable information attached. Because the service uses zero-knowledge architecture, SecretFile processes no personal data contained within the files themselves. Full details are available in the privacy policy.
Yes, SecretFile is completely free. No account, subscription, or payment is required to upload or download files. All features including AES-256 encryption, one-time delivery, password protection, and expiration timers are available at no cost.

More privacy tools

Everything you need to share private data safely - free, no account needed to get started, runs in your browser.

SecretNote

Write a private note, generate a one-time link, and share it. The note self-destructs the moment it is read - nothing is stored, nothing leaks.

Create a secret note →

SecretScreen

Upload a screenshot and get a self-destructing share link. The image is encrypted before upload and deleted after the first view - no permanent hosting.

Share a screenshot →

Hash Generator

Instantly generate MD5, SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512 hashes in your browser. Your input is never sent to the server.

Generate a hash →

Password Generator

Generate strong, random passwords with full control over length and character sets. Everything runs locally - your passwords never touch a server.

Generate a password →