How is this actually private — can induwara.lk read my messages?

No. Your browser generates a random encryption key and puts it in the part of the link after the # (the 'fragment'), which browsers never send to any server. Every message and file is encrypted with that key before it leaves your device, so our server only ever stores ciphertext it has no key for. We genuinely cannot read your chat.

Where is the chat stored, and when is it deleted?

Only encrypted blobs are stored temporarily so the other person can receive them. Everything is permanently deleted when the self-destruct timer (1, 8, or 24 hours) runs out — the server enforces this regardless of what either person does — or instantly when either of you hits Destroy. After that, even the key can't recover anything.

How do I start a chat with someone?

Click Create secret chat, then copy the link and send it to one person (via any messenger). When they open it, you're connected and can chat in real time. The link contains the decryption key, so treat it like a password — anyone who has the full link can read the conversation.

Can I share images and files?

Yes. Files up to 3 MB are encrypted in your browser before upload, relayed as ciphertext, and decrypted on the other side. Images preview inline; other files appear as a download. Like the messages, we can't see them, and they're destroyed with the session.

Do I need an account?

No signup, no account, no phone number, no app. Open the page, create a chat, share the link. That's the whole point — private by default with nothing tying the conversation to your identity on our side.

Can I make a group chat, and how do people join?

Yes. Create a Group chat and anyone can join with the link, or with the Group ID + passphrase (handy when you can't paste a long link). Each person picks a display name and optional photo — like Telegram — and messages show who sent them. The passphrase derives the encryption key in the browser, so the server still never sees it.

What are the limits and timers?

Files are up to 3 MB. Set the self-destruct timer when you create the chat: 1 hour, 8 hours, 24 hours, 1 week, 1 month, or Never. Messages appear within a couple of seconds. Groups support many participants; 1-to-1 chats are capped at two. For long-term or large-file needs a dedicated messenger is better — this is for quick, private, disposable chats.

Is anything truly un-recoverable once it's gone?

Yes. We never hold the key, and we delete the ciphertext on the timer. There's no plaintext anywhere on our side at any point, so once a session expires or is destroyed there is nothing for anyone — us included — to recover.

Can I chat anonymously, with no account or phone number?

Yes — there's no sign-up, no email, no phone number, and no app to install. You're never asked to identify yourself to us. In a group you choose a display name just so others can tell who's who; it's encrypted along with your messages and is gone when the chat self-destructs.

Is this a Telegram or Signal alternative?

It's a lightweight, no-account alternative for quick private conversations. Telegram and Signal are full apps with accounts and message history; Secret Chat is the opposite — a disposable, link-based room that leaves nothing behind. Use it when you want to share something privately right now without anyone installing or signing up for anything.

How do I send self-destructing messages?

Every message here is self-destructing by design: pick a timer (from 1 hour up to 1 month, or Never) when you create the chat, and the whole conversation — text and files — is deleted when it runs out, or instantly when anyone taps Destroy. There's no separate setting; disappearing is the default.

Can I use this to send a password or secret securely (like Privnote)?

Yes — it's a strong free alternative to one-time-secret tools like Privnote. Create a chat, paste the password, API key, Wi-Fi code, or any sensitive note, set a short self-destruct timer, and send the link to the recipient. The secret is end-to-end encrypted with a key that lives only in the link, so our server never sees it, and it's permanently deleted once the timer runs out or either side opens and destroys it — far safer than emailing or messaging a password in plain text.

Private · End-to-end encrypted

Secret Chat — private, encrypted, self-destructing

Spin up a private room, share the link with one person, and chat with text and media. Everything is end-to-end encrypted, nothing readable is stored on our side, and the whole conversation self-destructs on a timer. No signup.

By Induwara AshinsanaUpdated May 29, 2026

End-to-end encrypted · nothing readable is stored

A private 1-to-1 chat. Share the link with one person — the encryption key lives only in the link.

Auto-destruct after

How it works

When you create a chat, your browser generates a random AES-256 key and places it in the link's #fragment— the one part of a URL browsers never transmit to a server. Every message and file is encrypted with that key in your browser before it's sent, so our server only ever relays and briefly stores ciphertext it cannot decrypt.

The person you share the link with opens it, their browser reads the same key from the fragment, and messages decrypt locally. We never see the key and never see plaintext — there is no point at which a readable copy of your conversation exists on our side.

A server-enforced self-destructdeletes the session and all its encrypted data when the timer expires (or instantly when either person taps Destroy). Because we hold no key and keep no plaintext, once it's gone it's gone — unrecoverable by anyone, including us. Important: the link is the key, so only send it to the person you want in the chat.

What people use it for

Secret Chat fits any moment you want a conversation that simply doesn't stick around:

Send a private link to one person — share a password, an address, or something personal without it living in a messaging app's history.
An anonymous chat with no account — no sign-up, no phone number, no app; open the page and you're chatting.
A disposable group room — spin up an encrypted group, drop the link (or the Group ID + passphrase) in your team chat, and let it self-destruct when you're done.
Self-destructing messages and files — share an image or document that's gone on a timer, encrypted end-to-end the whole way.
A quick, no-install alternative to Telegram/Signal — when you don't want anyone signing up for anything just to talk privately once.

Frequently asked questions

Related tools

LiveUtility

Hash Generator

Generate MD5, SHA-1, SHA-256, SHA-384, and SHA-512 hashes of text or files entirely in your browser. Optional HMAC mode with a secret key. RFC 1321 / FIPS 180-4 / RFC 2104 conformant, no uploads.

Open tool

LiveUtility

QR Code Generator

Generate QR codes for URLs, text, Wi-Fi, vCards, email, phone, or SMS. Customise colours, set error-correction level, add a centre logo. Encoded entirely in your browser, no signup, downloads as PNG or SVG.

Open tool

LiveUtility

Password Generator

Generate strong random passwords or memorable passphrases. Customise length, character sets, and ambiguous-character exclusion. Live entropy meter follows NIST SP 800-63B. Crypto-secure (Web Crypto), zero uploads.

Open tool

Sources & references

Encryption is AES-GCM-256 via the browser's native Web Crypto API; the key never leaves your device's URL fragment.

Questions or a bug to report?

Email [email protected].