What is a self-destructing message?

A self-destructing message is a secret that permanently deletes itself after being read once. Unlike regular emails or messages, once the recipient opens the link, the content is destroyed and cannot be accessed again.

How does a one-time secret link work?

When you create a one-time secret link with ProtonURL, your message is encrypted in your browser with AES-256-GCM. The decryption key is stored only in the URL fragment, which is never sent to our servers. When the link is opened, the content is retrieved, decrypted, displayed once, and permanently deleted with a signed ECDSA deletion proof.

Can I add a password to the message?

Yes. ProtonURL supports optional passphrase protection. Even if someone guesses the link URL, they cannot read the content without the passphrase. The passphrase is also never sent to our servers.

What happens to the message after it is read?

After the first read, the encrypted content is permanently deleted from our servers. We generate a cryptographically signed ECDSA deletion proof that anyone can verify to confirm the content was truly destroyed and not retained.

Is this different from burn after reading email?

Yes. Traditional burn-after-reading emails rely on the email provider honoring a promise to delete. ProtonURL uses end-to-end encryption so we cannot read your content, and the content is cryptographically destroyed after one read with a verifiable deletion proof.

One-time read · Self-destructing

Send a One-Time Secret That Self-Destructs After Reading

Create a self-destructing message link in seconds. Once opened, the content is permanently destroyed — no copies, no traces, no second chances.

AES-256-GCM encrypted
Burns after first read
Optional passphrase
File attachments supported

Create a self-destructing link Send a password instead

How self-destructing links work

Enter your message

Type or paste your secret. Optionally add a passphrase for extra protection.

Encrypted in-browser

AES-256-GCM encryption happens on your device. We never see the plaintext.

Share the one-time link

Send the link via email, chat, or any channel. Without the URL, content is inaccessible.

Burned after reading

Content is displayed once, then permanently deleted with a verifiable ECDSA proof.

Why not just send an email?

Regular email leaves permanent copies on servers, in inboxes, and in backups. Here's how ProtonURL is different.

Email & Chat

Messages live forever on servers, in recipient inboxes, and in backups. One breach exposes everything.

Permanent copies
Server-side storage
No deletion proof

Password Manager

Requires both parties to use the same password manager. Sharing to external parties is awkward or impossible.

Both parties need account
No one-time option
Good for credentials

ProtonURL

Zero-knowledge encryption, one-time read, verifiable deletion. No account needed for basic use.

Encrypted end-to-end
Permanently destroyed after read
Verifiable deletion proof
No account required

Built for real security

AES-256-GCM

Military-grade encryption. The same standard used by governments and banks worldwide.

Zero-Knowledge

The decryption key never leaves your device. We cannot read your content even if we wanted to.

ECDSA Proofs

Every deletion is cryptographically signed. Anyone can verify the content was truly destroyed.

No Account Needed

Start using immediately. No registration, no email, no traces left on our servers.

Frequently asked questions

Ready to send your first self-destructing secret?

Create an encrypted, one-time link in under 10 seconds. No sign-up required.

Create a self-destructing link — free