One-Time Secret
Share a password with a one-time, end-to-end encrypted link that self-destructs.
Passwords sent by email or chat live forever in history and backups. Our one-time secret encrypts in the browser with AES-256-GCM, uploads only ciphertext, keeps the key in the URL fragment and deletes the secret the moment it is revealed. Optional passphrase with server-side attempt limit, expiry of 1 hour to 7 days, and a burn button for the sender.
- Stage
- Live, free
- URL
- secret.fullstackpartner.com
- Revenue
- Planned team plan
- Price
- Free; team plan planned
- Audience
- IT, agencies, developers, HR
- Stack
- Static HTML/JS · PHP 8.5 · nginx · Web Crypto
Problemet
- Credentials pasted in Slack, Teams or email are a common source of breaches.
- Existing tools often encrypt on the server, so the operator could read secrets.
- Chat link previews can burn one-time links before the recipient sees them.
Produktet
Client-side encryption with the key in the fragment, a status check that never reveals or burns, reveal on explicit click, atomic delete on read, PBKDF2 passphrase with a hashed verifier and 5-try limit.
- Paste the secret and choose expiry and an optional passphrase.
- Copy the link and send it.
- The recipient clicks Reveal; the secret is deleted on our server in the same request.
Hvem betaler og hvorfor
Forretningsmodel
| Indtægt | Pris | Noter |
|---|---|---|
| Free | 0 kr | Unlimited secrets up to 20,000 characters. |
| Team (planned) | 99 kr a month | Own logo and domain, file attachments, audit log of reads. |
Marked og mål
'share password securely' and 'one time secret' are established search terms with clear B2B intent, which fits the agency and IT audience of fullstackpartner.com.
The tools are free and stay free. Revenue comes from paid add-ons and from leads for the paid security suite. Targets are planning assumptions.
Vejen til markedet
Launch
- Live (done)
- Search Console
Team
- Branding and custom domain
- File attachments
Kanaler
| Organic search | B2B intent queries. |
|---|---|
| Viral loop | Every recipient sees the tool and can create their own. |
Konkurrence
| Alternativet i dag | Hvorfor vi vinder |
|---|---|
| onetimesecret.com, Password Pusher | Established; we add end-to-end encryption and preview-safe reveal. |
| Bitwarden Send | Excellent but needs an account. |
Det måler vi
- Secrets created
- Share of secrets revealed
- Recipients who create their own
Status og køreplan
- AES-256-GCM in the browser, key only in the URL fragment
- Atomic one-time read with file locking, burn link for the sender
- Passphrase via PBKDF2 (310,000 rounds) with hashed verifier and 5-try limit
- Lazy cleanup of expired secrets, rate limits
- Own subdomain with Let's Encrypt, strict CSP, HSTS, no cookies, no analytics
- SEO: unique title, description, FAQPage and WebApplication schema, sitemap and Open Graph card per page
- Installable PWA with offline support
- Cross links between all five free tools and SiteSentry
- End-to-end browser test of every page and flow
- File attachments
- Team branding
- Read receipts by email
Risici
| Risiko | Sådan håndterer vi den |
|---|---|
| Abuse for spam or malware | Text only, size and rate limits, no public listing. |
| Data loss on server issues | Secrets are short-lived by design; users can always create a new one. |
Vil du have et produkt som dette?
Vi bygger version et af produkter som One-Time Secret fra ca. 20.000 kr ($3.000): webapp, adminpanel, mobilapp og API, live på dit eget domæne. Derefter kan vi hoste og vedligeholde det for ca. 3.500 kr ($500) om måneden.