Every time you paste a password into Slack or email, it stays there forever. 1time.io fixes that.

1time.io is a free, open-source tool for sharing passwords, API keys, SSH keys, and sensitive files through encrypted one-time links that self-destruct after reading.

How it works: You paste a secret. Your browser encrypts it with AES-256-GCM before anything leaves your device. You get a link. The recipient opens it once, reads it, and the data is permanently deleted. The same link becomes a dead 404 forever after. No account required. No tracking. No cookies.

The key difference from every similar tool: The server cannot read your data — even with full database access. The decryption key lives in the URL fragment (#), which browsers never send to the server. Even if 1time.io were subpoenaed, hacked, or run by a rogue sysadmin, your secrets stay secret. This is zero-knowledge architecture, not just a marketing claim.

What you can share:

Passwords and passphrases
API keys and access tokens
SSH keys and database credentials
Sensitive files up to 10 MB (encrypted before upload — the server sees only bytes)
Any text you need to send once without it lingering in chat history

Built for developers and IT teams who are tired of credentials living forever in Slack threads, email archives, and Notion pages. Comes with a first-party CLI so you can pipe secrets directly from your terminal: printf 'db_password' | 1time send.

Self-hostable with a single docker compose up -d. Go backend, Redis, static Next.js frontend. Runs on a $5 VPS. Multi-arch (amd64 + arm64).

Also includes: password generator, passphrase generator, API key generator, WiFi password generator, and QR code sharing for cross-device handoffs.

Free and open source (MIT). No freemium trap. The hosted version at 1time.io is free forever for individuals.

Igor Ermakov

About