PrivNote v.2

TL;DR: PrivNote is a free service that lets you send secret messages securely (such as .env files). You have access to detailed view logs and fine-grained control over the message's lifetime + the number of views before self destruction.

An example of the detailed view logs.

Secrets are never sent to our server. We use AES-256-GCM (with a 256-bit key size via Galois/Counter Mode) to encrypt.

Brief overview: The client generates a random key with 256 bits of entropy. The key is used to encrypt the message. The encryption key is sent to the server and stored in a database (using your anonymous cookie id as a foreign key). The server returns a token to the client. This token is used to retrieve the key from the server when the secret message needs to be viewed. When the secret message is accessed, the server uses the token to fetch the key, and the client uses this key to decrypt the message. In other words, the entire secret is encrypted and embedded in the url only.

PrivNote uses anonymous auth - a single httpOnly private cookie to give you access to your secrets.