Zero-knowledge encryption means we never see your content — ever.
Enter any sensitive data — passwords, API keys, SSH keys, or private messages. It never leaves your browser unencrypted.
Set expiry (5 min to 30 days), view limit (1–100), optional passphrase, notification email, and IP allowlisting.
We encrypt with AES-256-GCM and give you a unique link. We cannot decrypt your data — ever.
Send the link via any channel. Share the passphrase (if set) via a different channel for security.
Recipient opens the vaultsends.com link. They see basic info without revealing content yet. IP is verified if allowlist is set.
If passphrase-protected, they enter it to decrypt. Wrong guesses are rate-limited and IP-blocked.
The decrypted content appears in a secure terminal view. They can copy or download immediately.
After configured views, the secret is permanently destroyed — overwritten with random bytes and deleted.
| Feature | VaultSends ✦ | PrivNote | OneTimeSecret |
|---|---|---|---|
| AES-256-GCM Encryption | ✓ Yes | ✓ Yes | ~ Basic |
| Zero-Knowledge Architecture | ✓ Full | ~ Partial | ~ Partial |
| Passphrase Protection | ✓ PBKDF2-SHA512 | ✗ No | ✓ Yes |
| Email Notifications | ✓ Yes | ✗ No | ✗ No |
| IP Allowlisting | ✓ Yes | ✗ No | ✗ No |
| Expiry Options | ✓ 8 Options (5min–30d) | ✗ Fixed | ~ Limited |
| No Account Required | ✓ Yes | ✓ Yes | ✓ Yes |
| ✓ Always | ✗ Has Ads | ~ Free tier has ads | |
| AI Secret Type Detection | ✓ Yes | ✗ No | ✗ No |
| Security Score | ✓ Yes | ✗ No | ✗ No |
| Price | ✓ Free Forever | ~ Free (with ads) | ~ Freemium |