🔒 Someone sent you a locked message
Type the password they gave you to read it. It is unlocked here, on your device.
Secret Message
Write something private, such as a Wi-Fi password, an account number or a door code, and lock it with a password. You get a link to send. Only someone with the password can read it.
What “locked on your device, never stored” means for this tool
When you open this page, your browser downloads the tool itself, the same way any web page loads. From then on, your message is locked inside your browser, on your own device, before the link exists.
The message travels inside the link, not on this website. The locked message sits after the “#” in the link, and browsers never send that part of a link to any website, this one included. There is no database: nothing is stored on a server, so there is nothing to leak.
When someone opens the link, this page takes the locked message out of the address bar right away and unlocks it on their device with the password.
What this can't do: the link lasts as long as someone keeps it (for example, in a chat history), and it cannot be deleted remotely or set to expire. Without the password it is unreadable, so send the password a different way from the link.
What the server does see: like any website, the server that delivers this page sees basic connection details such as your IP address and which page was requested. Never the message or the password.
Visit counting: this site counts visits with privacy-friendly analytics. No cookies, no ads, no tracking across other sites, and your IP address is not stored. It records which page you opened, your country, your device type, how long you stayed and when you make a link, never the message, the link or the password.
1. Your message
2. Lock it with a password
How the lock works
- Your password becomes a key. Your browser runs it through PBKDF2 (600,000 rounds), a deliberately slow scrambler, so each password guess takes real time.
- The message is encrypted with AES-256 with a built-in tamper check, so a changed or cut-off link is refused instead of showing garbled text.
- It rides in the link after the “#”. That part of a link stays in the browser; it is never sent to a website's server.
- Wiped from the address bar on arrival, so the locked message doesn't sit on the recipient's screen or in a screenshot.
How to use the Secret Message
- Type your message.
- Choose a password, or press Make a strong one.
- Press Lock & make link, then send the link.
- Send the password a different way, like by text or a phone call.
Questions
Is my message stored on a server?
No. It is locked on your device and carried inside the link itself, after the “#”. Browsers never send that part of a link to any website, so there is nothing stored anywhere to leak.
How does the other person read it?
They open the link and type the password. The message is unlocked on their device.
Can I delete the message or make it expire?
No. Because nothing is stored on a server, the link works for as long as someone keeps it. Without the password it can never be read.
How long can the message be?
Up to 10,000 characters. Long messages make long links, and some chat and text apps cut off very long links, so email works best for those.
Is it safe to send a password or bank details this way?
Yes, if you send the password for the message a different way from the link. The message is locked with AES-256 and a deliberately slow password check.
Still stuck, or want a tool that isn't here? Ask on the Nebula Discord.