One-time secrets,
destroyed on read.
Zero-knowledge, browser-encrypted data delivery for teams and deployment scripts. Data is destroyed from memory the instant it is revealed.
Terminal Access Snippet
Append ?raw=true for raw plain-text output.
SECRET NOT FOUND
This secret has already been retrieved and permanently destroyed, or it expired.
Encrypted Secret Waiting
This payload will self-destruct from the server immediately after viewing.
Unlocking…
This secret is being permanently destroyed from the server as you read it.
Litterae.
An exclusive ecosystem for automated journalism. Set up your AI newsroom, fetch pristine articles natively written in 10 languages, and automate your content empire.
Smart multi-vertical price comparison engine. Compare real-time prices across supermarkets, pet care, health & top online deal catalogs in one unified search.
Free & Open Security
Digital privacy shouldn't be locked behind monthly subscription tiers.
100% Free Forever
No freemium tiers, no secret quotas, no credit cards. All encryption features are unlocked for everyone.
Zero Sign-Up Required
No account registration, no emails, no passwords. Open the tool, send your secret, and close the tab.
Zero Ads & Tracking
Zero advertisement scripts, zero third-party tracking cookies, zero invasive telemetry. Pure static speed.
Engineered for absolute confidentiality
Client-Side AES-256 Key Isolation
Encryption happens in your browser before network transmission. The decryption key resides exclusively in the URL hash fragment (#key), which standard HTTP protocols guarantee is never sent to the server.
Atomic Erase
The millisecond a recipient requests the secret payload, an atomic read + delete transaction wipes the record. No backups, no recovery.
Native cURL & Shell Support
Send and receive raw text payloads directly from your terminal or CI/CD pipelines without browser dependencies.
Anti-Bot Link Confirmation
Explicit human confirmation step stops Slack, Discord, or email antivirus preview crawlers from destroying your link before intended viewing.
Automated TTL Expiration
Configurable time-to-live from 1 hour to 30 days. Background maintenance timers purge unread expired records continuously.
cURL & CLI Quickstart
$ curl -d "MY_API_KEY=sk_live_998877" https://hushhh.cc/
{"id":"7b89f2a03c4d5e6f7a8b9c0d1e2f3a4b","url":"https://hushhh.cc/secret/7b89f2a03c4d5e6f7a8b9c0d1e2f3a4b"}
$ curl -d "my secret" "https://hushhh.cc/?raw=true"
https://hushhh.cc/secret/7b89f2a03c4d5e6f7a8b9c0d1e2f3a4b
$ curl https://hushhh.cc/api/secrets/7b89f2a03c4d5e6f7a8b9c0d1e2f3a4b?raw=true
MY_API_KEY=sk_live_998877
Frequently Asked Questions
Q: Is hushhh really 100% free with no limits?
Yes, completely free. There are no paid tiers, subscriptions, or hidden paywalls. It is maintained as a free community utility for developers.
Q: Can the server read my secret content?
No. In standard E2EE mode, data is encrypted in your browser. The decryption key exists strictly in the URL fragment (#key), which HTTP standards guarantee is never transmitted to the server.
Q: What happens if nobody opens the link?
Every secret has a configurable time-to-live (TTL). If it expires unread, an automated background job permanently deletes it from database storage.