# OneTime

> A free, zero-knowledge one-time secret sharing tool from Champlin Enterprises.
> Send a password, API key, or private note as a link that can be viewed exactly
> once, then self-destructs. The secret is AES-256 encrypted in the sender's
> browser; the encryption key lives in the URL fragment and never reaches the
> server, so the operator literally cannot read stored secrets.

## What it does
- Encrypts the secret client-side with AES-256-GCM (Web Crypto API).
- Stores only ciphertext + a non-secret IV. The key stays in the URL fragment.
- Burns the secret on first view (returned and deleted in one DB transaction).
- Expires unopened links automatically (5 minutes to 7 days, chosen by sender).
- Requires no account, sign-up, app, or payment. No tracking, no third-party scripts.
- Optional passphrase (PBKDF2) for a second factor beyond the link.

## Pages
- Create a secret: https://onetime.champlinenterprises.com/
- How it works: https://onetime.champlinenterprises.com/docs
- What's new: https://onetime.champlinenterprises.com/whats-new

## Maker
Champlin Enterprises — an AI-first software studio. https://champlinenterprises.com