What happens if someone clicks a one-time link after it has already been viewed?

Because the encrypted payload is purged upon initial retrieval, subsequent attempts to open the link return an expired status (such as a 410 Gone error). The secret is no longer on the server and cannot be retrieved again.

Does a one-time link prevent someone from taking a screenshot?

No. A one-time secret link controls server-side data retention and access count, not the recipient's physical screen. Anyone who views plaintext information can copy it, write it down, screenshot it, or take a photo. Always only share secrets with recipients you trust.

Should I use a one-time secret link instead of a password manager?

No, they serve different purposes. Password managers are designed for secure long-term credential storage, vault synchronization, and day-to-day autofill. One-time secret links are designed for transmitting credentials or private notes to external parties or people who do not share your password manager vault.

Where is the decryption key stored?

In Paste & Purge, the decryption key is located strictly in the URL fragment (the portion after the # symbol). Web browsers never transmit URL fragments over HTTP to the server, so the server never possesses the key required to decrypt your data.

What happens if the recipient never clicks the link before it expires?

If a secret reaches its expiration time (e.g., 1 hour or 24 hours) without being opened, the server automatically purges the encrypted record. Even if someone clicks the link later, the content is permanently inaccessible.

Can I share a temporary secret with more than one person?

Yes. While one-time links default to 1 view, you can configure multi-view limits (such as 2, 5, or 10 authorized views) when you need to distribute an access code to a small group before the link self-purges.

Educational Guide

What Is a One-Time Secret Link? How It Works and When to Use One

Q: What is a one-time secret link?

A one-time secret link is a web address created specifically to deliver encrypted information once. When the recipient opens the link and views the content, the server removes the stored encrypted data, ensuring the link cannot be opened a second time.

Published by Paste & Purge · Educational Guide · 7 min read

A one-time secret link is a temporary web address created specifically to deliver sensitive information once. After the link is opened and the information is viewed, the underlying record is automatically deleted from the server.

Unlike standard URLs that point to permanent web pages or persistent documents, a one-time secret link is built around single-use access. Once the allowed retrieval has taken place, the link stops functioning, and any subsequent visit displays an expired notification.

This single-use mechanism makes one-time secret links a popular choice for sharing temporary login credentials, Wi-Fi passwords, security codes, and confidential notes that should not remain permanently stored in messaging history.

Why Ordinary Links and Messages Leave Information Behind

When you send sensitive text through standard email, SMS, or workplace chat applications, the information rarely disappears when the conversation ends. In most systems, messages persist across several layers:

Cloud chat histories that remain searchable indefinitely by all conversation participants
Automated device backups on phones, tablets, and computers syncing message databases
Unencrypted notification previews appearing on lock screens and peripheral smartwatches
Corporate email archiving systems retaining communications for compliance and legal discovery
Shared team channels where new or departing colleagues can read historical discussions

In contrast, a one-time link decouples the communication channel from the sensitive payload. Even if the link itself remains in a chat log, the underlying confidential data is purged as soon as the recipient opens it.

How a One-Time Secret Link Works

A properly architected one-time secret service relies on client-side cryptography combined with atomic database operations:

Client-Side Encryption

When you enter your text into Paste & Purge, your browser generates a random 256-bit encryption key and encrypts the plaintext using AES-256-GCM locally. The raw plaintext never leaves your device.

URL Fragment Isolation

The decryption key is placed into the URL fragment (the hash # portion). Under standard browser HTTP behavior (RFC 3986), URL fragments are never sent to web servers during page requests.

Encrypted Server Storage

The server receives only an opaque encrypted blob along with metadata (expiration timestamp and allowed view count). The server does not have the decryption key.

Transmission & Delivery

You send the generated link to the recipient via your preferred channel (email, chat, SMS, or QR code).

Atomic Server Purging

When the recipient visits the link, the server returns the encrypted payload and immediately wipes the ciphertext from storage in an atomic transaction.

Local In-Memory Decryption

The recipient’s web browser reads the decryption key from the URL fragment and decrypts the secret in device memory.

What Happens When the Recipient Opens the Link?

When the recipient clicks the link, they are taken to a clean, minimal interface prompting them to view the secret.

Once revealed:

The content is displayed on screen, with a one-click copy button.
The server executes an irreversible purge of the stored ciphertext.
If the recipient refreshes the browser page, the message is gone and cannot be reloaded.

One-Time Links vs. Multi-View Links

While single-use links are ideal for one-on-one sharing, some situations involve multiple stakeholders. Paste & Purge supports both single and multi-view policies:

Feature	One-Time Link (1 View)	Multi-View Link (2, 5, 10 Views)
Max Views Allowed	Exactly 1 view	Configurable quota (2, 5, or 10)
Purge Trigger	Immediately upon first open	When view count reaches the configured limit
Ideal Use Case	Direct passwords, garage codes, personal DMs	Distributing a meeting Wi-Fi key or staging token to a team
Expiration Protection	Expires if unused within time limit	Expires if unused, or purges when views are filled

Expiration Times and Why They Matter

What happens if the recipient never opens the link? An unread secret link could potentially linger if not bound by an expiration timer.

Paste & Purge enforces strict time-based expirations (5 minutes, 15 minutes, 1 hour, or 24 hours). If a secret is not opened within the designated timeframe, automated background routines purge the database record. Once expired, the link is permanently non-functional.

Dual-Trigger Disposal

The secret is purged whenever the first condition occurs: either the view limit is reached OR the expiration timer elapses.

When to Use a One-Time Secret Link

One-time secret links are especially useful when transmitting transient credentials across non-secure or public communication channels:

Temporary Login Codes

Sending 2FA recovery backup codes or one-time verification tokens during account setup.

Account Passwords

Sharing initial onboarding credentials or temporary passwords without leaving them in emails.

Wi-Fi Network Credentials

Giving house guests or visitors Wi-Fi access without permanently posting keys in group chats.

Door & Garage Entry Codes

Delivering access codes to maintenance contractors, cleaning services, or house sitters.

Private & Personal Notes

Sending surprise event details, private personal messages, or confidential thoughts.

API Keys & Secrets

Handing off staging database credentials or third-party API tokens to engineering peers.

Limitations and Things Users Should Understand

It is important to maintain realistic expectations regarding any security tool. A one-time secret link is designed to destroy the stored data on the server once the configured view limit is reached, but:

A recipient can always screenshot, copy, or write down the plaintext once revealed.
If an unintended party intercepts the link before the intended recipient clicks it, they could consume the view.
To protect against link interception, use Paste & Purge’s optional passphrase protection and deliver the password via a separate channel.
Once expired or viewed, there is no backup or recovery mechanism to restore the data.

One-Time Secret Links vs. Password Managers

A one-time secret link does not replace a password manager. They solve fundamentally different problems:

Password Managers (1Password, Bitwarden, KeePass)

Designed for permanent credential vaults, auto-generating complex passwords, syncing across personal devices, and managing daily browser autofill.

One-Time Secret Links (Paste & Purge)

Designed for ephemeral transmission. Perfect when you need to send a credential to someone who doesn’t share your vault, or when transmitting a one-off secret that should leave no audit trail in chat archives.

Explore our guide on how to share passwords securely or read about disappearing messages.

Practical Tips for Sharing Temporary Secrets Safely

✓

Use short expiration windows

Select 5 or 15 minutes when both parties are actively chatting to minimize exposure time.

✓

Split channels for high-security credentials

Send the secret link over chat, and send the optional decryption passphrase over SMS or a phone call.

✓

Never put usernames and passwords in the same secret

Share the account identifier separately so an intercepted link cannot be matched to a specific account.

✓

Rotate credentials when appropriate

If a temporary password or contractor access token has fulfilled its task, revoke or change it.

Frequently Asked Questions

Common questions about one-time secret links, zero-knowledge encryption, and data retention.

Create a One-Time Secret Link

Encrypt your text client-side with AES-256-GCM and generate an expiring link that self-destructs after being read. Free, instant, and zero registration required.