Secure Secret Pusher

Sentinel Peak Media

Home Help Sign in

☰

Secure Secret Pusher

Secure Secret Pusher

If you were sent a secure secret link, open it exactly as provided. If you need admin access, use ?a=admin.

About Secure Secret Pusher (SSP)

SSP is a minimalist, one‑click secure link generator for short‑lived messages and files.

Secrets are encrypted at rest on the server using libsodium (XChaCha20‑Poly1305; uploaded files use the streaming secretstream construction). The encryption key is derived from a server‑side secret (APP_KEY) stored outside the public web root. When a recipient clicks Reveal or Download, the server decrypts and serves the content.

Links can be configured to burn after a set number of views and/or expire after a fixed lifetime. Burned/expired secrets are automatically deleted.

Created by Craig Daters to reduce clear‑text sharing of passwords and sensitive data over email and chat. For best results, share the link and any recipient passphrase via separate channels.

Help & instructions