One link. One read. Then it's gone.
Share passwords, API keys, and files with colleagues across agencies through a link that self-destructs after one view. Collect sensitive forms the same way — submit once, burned.
Send a secret. Or collect one.
Secret Share
Paste a password or API key, or drop in a file. Set an expiry and a view limit, add a password if you want. Get a one-time link. The recipient opens it, views or downloads once, and it's permanently destroyed.
- Text encrypted directly in Postgres
- Files envelope-encrypted into RustFS
- Burns on GET — reload and it's gone
Secret Request
Build a small dynamic form — text, file, date, select, email — and send a one-time link. The respondent fills it in, submits once, and that link is burned. You retrieve the answers through your own dashboard.
- Generic field types, not hardcoded Q&A
- Answers encrypted, stored as jsonb
- Burns on POST — submit-once, always
Three steps. Then it's out of your hands.
-
Paste or upload
Text goes straight to encrypted ciphertext. Files are envelope-encrypted before they touch RustFS.
-
Set the limits
Choose an expiry window, a max view count, and an optional password before you generate the link.
-
Share, then it burns
One conditional UPDATE checks and burns atomically. First open wins, every other attempt gets rejected.
No shortcuts on how it's secured.
Every session starts with a one-time code sent to a verified .gov.my address — no passwords to leak, no third-party identity provider. Storage is self-hosted end to end: Postgres for metadata, RustFS for encrypted file payloads.
- .gov.my domain suffix check on every login, OTP-only
- Envelope encryption — data keys never stored in plaintext
- Self-hosted RustFS + Postgres, nothing leaves your infra
UPDATE secret_links
SET burned_at = now(),
use_count = use_count + 1
WHERE token = $1
AND burned_at IS NULL
AND expires_at > now()
AND (max_uses IS NULL
OR use_count < max_uses)
RETURNING *;
Stop emailing passwords. Start burning them.
Sign in with your .gov.my email — no separate account, no password to remember.
Sign in with .gov.my email