Share secrets your security team can trust
A zero-knowledge, one-time link for the credentials, tokens and incident notes IT teams hand off every day. End-to-end encrypted. No residue in Slack, email, or ticket histories.
Start free trialWhere credentials leak
Every IT organization leaks secrets through the same channels. Scrt.link closes them off.
Chat archives
Slack, Teams and WhatsApp keep messages forever. A password shared in a DM is a password in a backup.
Email threads
Inboxes are searchable — and so is every forwarded access token.
Ticket systems
Jira, Zendesk, ServiceNow. Credentials pasted to resolve an incident linger in comments for years.
Onboarding handoffs
Temporary credentials for a new hire shouldn't survive past their first login.
A safer handoff
Three steps replace every "I'll DM you the password" message.
Encrypt
Paste the credential, token or note. It's encrypted in your browser before it leaves the device.
Share one link
Send the secure link through any channel. The contents live on our server only as ciphertext.
Self-destruct
Once opened, the secret is gone. You can require a password and be notified of access.
Built for security-conscious teams
End-to-end encrypted
AES-256-GCM with keys that never touch our servers.
Zero-knowledge architecture
We can't read your secrets. Neither can anyone else — even if our infrastructure is compromised.
Read receipts
Know exactly when a credential was accessed — or if it never was.
Swiss privacy
The company behind scrt.link operates under Swiss jurisdiction and the FADP, one of the strictest data protection regimes in the world.
REST API and SDK
Automate incident response, onboarding and key rotation workflows.
Custom expiration
From five minutes to thirty days. No secret outlives its purpose.
Effortless Integration
Seamlessly connect your tools, data and workflows in minutes.
Connect to the API
The provided client module enables a simple and convenient way to interact with the API.
<!-- Include in your app -->
<script type="module">
import { scrtLink } from 'https://scrt.link/api/v1/client-module';
// Instantiate client with API key.
const client = scrtLink('<your-api-key>');
client.createSecret('Some confidential information…').then(console.log);
</script>
API Response (JSON)
In the background the client module interacts with the Rest API. No further setup needed.
// Client module response:
{
"secretLink": "https://scrt.link/s#gOOei~kEkcYAAX-YJQnGooSXdSJg8MXkzk~2",
"receiptId": "D0waygL3",
"expiresIn": 86400000,
"expiresAt": "2025-04-24T16:15:52.172Z",
"viewLimit": 1
}