Share config files and secrets securely
Paste a password, key or config file and get a one-time link. It's encrypted at rest, opens a limited number of times, and deletes itself when it expires.
How it works
-
Paste what you need to send
Text or a small text file — a .env, a key block, a connection string.
-
Copy the one-time link
We show it once and keep only its fingerprint. Send it to your recipient however you normally reach them.
-
They open it, then it burns
Your recipient opens the content with the link you sent them, and after 5 opens it is deleted.
We don't email the link for you. Delivering it is deliberately your job, so the link and the identity check never travel through the same channel.
Most sends are a handover: production .env contents, an API key or a database connection string going to a contractor or a new engineer, access details for a client, or a rotated key during an incident — each with an expiry already attached instead of sitting in a mailbox for years. Signed in? Ask someone to send you files instead
Questions
-
Can Sweent read what I send?
Technically yes. The encryption key is held on our servers, so this is not zero-knowledge. Content is encrypted at rest and bound to its share, which defeats a database-only compromise, but a full compromise of our systems or a lawful order could reach it. Rotate anything you send here once it has been received.
-
I lost the link. Can you resend it?
No. We store only a SHA-256 fingerprint of the link, so we cannot reconstruct it. Create a new send and rotate the old secret.
-
Can I send a zip or a keystore?
Not from this page — it takes text and text files only, and rejects binaries rather than corrupting them. Signed-in users can send real binary files up to 25 MB each from the dashboard, where they are scanned for malware before storage.
-
What do you do with my name and email?
If you provide them they are recorded as a sales enquiry so we know who reached out. That is a business contact record rather than marketing consent, and you can ask us to delete it at any time.
-
Is this a replacement for a password manager?
No. This is for moving a secret from one person to another once. A password manager is for storing secrets over time, and shared vault access is a better answer for anything ongoing.
Need this properly built into your stack?
Secure Share is free and stays free. If credential handover is a recurring problem rather than a one-off, our engineers do the version that fits your systems, your compliance regime and your team.
Security and privacy
Content is encrypted with AES-256-GCM before it is stored and is bound to the share it belongs to. Encryption keys are managed by Sweent, so this service is not end-to-end encrypted: it protects against a stolen database, a leaked backup or a misconfigured bucket, and it is not a substitute for a channel where you hold the key yourself.
A link opens 5 times in total. That allowance is shared across everyone holding the link rather than counted per person, and reloading the page spends one. After the last open the content is deleted. Links also carry an expiry of up to 30 days, and expired content is removed by a scheduled clean-up shortly after it lapses rather than at the exact second.
The link is shown once and only its SHA-256 fingerprint is retained, so it cannot be reissued if it is lost. Sweent does not email it on your behalf — delivery is yours, which keeps the link and the identity check on separate channels. Anyone holding the link can open it, so send it somewhere you trust and rotate the credential once the recipient has it.
This page accepts text and text files up to 64 KB per item, 20 items per link. Binary files are rejected rather than stored corrupted; signed-in users can send real binaries from the dashboard, where they are scanned for malware first.
The name and email address supplied with a send are retained alongside it as a business contact record. You can ask us to delete them at any time — see the privacy policy below.