Private Notes — Self-Destructing Encrypted Messages

Write a private message, share the link with one person, and the note destroys itself the moment they open it. The text is AES-256 encrypted inside the link itself — no server ever sees it.

Your private note

Encrypted with AES-256 in your browser. The note never reaches any server — it lives only inside the link's hash fragment.

What it does

Private Notes encrypts your message with AES-256-GCM in your browser using the Web Crypto API. The encrypted blob and the key live entirely in the URL hash — which browsers never send to servers. When the recipient opens the link, the note is decrypted, displayed, then wiped from history so a refresh shows nothing.

When to use it

Use it to share passwords, recovery codes, surprises, sensitive instructions or anything you don't want sitting in someone's chat history forever.

Benefits

AES-256 client-side encryption
Note never reaches any server
Self-destructs on first view
No signup, no logs, no traces

Example

Share a Wi-Fi password with a guest: write it, copy the link, send via WhatsApp. Once they open it, the password is gone — even if their phone gets stolen later.

Frequently asked questions

How can it self-destruct without a server?: The note lives in the link's hash fragment, which only the recipient's browser sees. After viewing, the page wipes the hash from history. The link still exists, but reopening it shows an empty form.
Can the recipient screenshot it?: Yes — like any message, anyone who reads it can copy it. Self-destruct prevents accidental re-reading and history leaks, not screenshots.
What if they share my link before opening?: The first person to open it triggers the destruction in their browser, but a copy of the link can still be decrypted by anyone who has it. Treat the link itself as the secret.
Is this end-to-end encrypted?: Yes — encryption and decryption both happen client-side. We never see the key or the plaintext.

Related tools

Browse all Privacy Tools →