WebicsPassword Share

Send a password once. Then it's gone.

For passwords and login details. Paste them in, send the link, and it's destroyed the moment it's opened.

0 of 10,000 characters

Shown to the person who opens the link. It's encrypted too.

Link expires after

Or as soon as it's opened, whichever comes first.

Add a passphrase (optional)

The link won't open without it. Send it separately, for example by text message, never in the same email as the link.

How it works

  1. Your browser encrypts it with a brand new key before anything is sent. We only ever receive the scrambled copy.
  2. The key travels only in the link, after the # sign. Browsers never send that part to us, so we can't read it.
  3. It opens once, then it's deleted. Unopened links expire on their own, after 7 days at most.
The technical detail
In your browser
AES-256-GCM with a new 256-bit key and 96-bit starting value for every link. An optional passphrase adds PBKDF2-SHA256 (600,000 rounds) and HKDF, so both are needed.
On our server
Encrypted again with AES-256-GCM under a server key, and bound to the link's ID. A copy of the database on its own is useless.
What we keep
The encrypted copy, its expiry and a random ID, until it's opened or expires. No name, email address, IP address or account, no analytics, and no backup copy.

Webics staff will never ask for your bank or card details through this form. Anyone can use this tool, so a link from it doesn't prove a message came from us. Not sure? Call 1300 932 427.