Share a secret

Encrypted in your browser · optional Read PIN / Write PIN · expires on its own
🔒 End-to-end encrypted (AES-GCM) · zero-knowledge: the key is in the link, never on our server
👁️ Optional Read PIN · ✏️ Optional Write PIN · ⏰ Optional expiry
📊 See when your secret is opened, edit it or resend it from My secrets — no account needed

Secret created

Share this link

Anyone with this link can read the secret. Send it over a channel you trust.

Your manage link — keep this private

See when it’s opened, edit it, change the expiry, get the share link again, or delete it. It works like a password for this secret: don’t send it to anyone.
Opening the note…
Loading…

Welcome to Sekreto

One step before your account is ready.

No access to Sekreto

This Tooly account doesn’t have access to Sekreto accounts. Ask an administrator to add you to “sekreto-users” in Tooly SSO.

You can still share secrets without an account, or use a Sekreto email account.

Sign-in service unavailable

Tooly sign-in is unavailable right now, try again shortly.

Email accounts still work, and you can share secrets without signing in.

We couldn’t confirm your Tooly sign-in

The sign-in took too long, was started in another window, or Tooly’s answer couldn’t be verified. Please try again.

Sign in to Sekreto

Continue with Tooly
One account for all itpro360 apps, with your existing two-step sign-in.
or use an email and password for Sekreto only

Create a Sekreto account

Continue with Tooly
One account for all itpro360 apps, with your existing two-step sign-in. Ask an administrator to add you to “sekreto-users” in Tooly SSO.
or use an email and password for Sekreto only
Important: your password encrypts your list of secrets in your browser. We can’t see it and can’t reset it. Next you’ll get a recovery code, then set up an authenticator app (required).
Already have one? Sign in

Reset your password

Your recovery code (from when you signed up) and a code from your authenticator app (or one backup code) get you back in with every secret intact. Nobody else, including the site owner, can reset it: that’s what keeps your list unreadable to us.
Lost your authenticator and backup codes too? An administrator can reset your authenticator; you still need this recovery code or your password.

Save your recovery code

If you forget your password, this code (plus your authenticator) is the only way back in with your secrets. Nobody can reset it for you. Keep it somewhere safe, like a password manager or on paper.

Choose a new password

An administrator gave you a temporary password. Choose your own to finish signing in. You’ll also get a new recovery code.
Secrets in your account stay listed with their stats. Their keys are on the devices that made them and in their manage links.

Set up your authenticator

Email accounts need a 6-digit code from an authenticator app (Google Authenticator, Microsoft Authenticator, 1Password, Authy…) each time you log in.
Scan this with the app:
Can’t scan? Add an account manually with this key (time-based):

My secrets