Zero-Knowledge Architecture
Understanding client-side cryptography and atomic destruction in 5 simple steps.
Create & Configure Payload
Paste API keys, passwords, or credentials into the secret console. Choose a time-to-live expiration (1 hour, 24 hours, 7 days, or 30 days). Unread secrets are automatically purged by automated background timers.
Browser-Side AES-256 Encryption
Secrets are encrypted locally in your browser before network transmission. The decryption key resides exclusively in the URL hash fragment (#key), which standard HTTP specifications guarantee is never sent to our servers.
Atomic One-Time Read & Wipe
The exact millisecond a recipient opens the link, an atomic read + delete transaction is executed. Once revealed, the record is permanently deleted from storage.
Anti-Bot Preview Confirmation
Chat apps (Slack, Discord, Teams) and email scanners automatically crawl links to generate unfurl previews. hushhh requires explicit human button click confirmation so crawlers cannot accidentally destroy your link.
Programmatic cURL & CLI Mode
Create secrets straight from terminal scripts using curl -d "MY_SECRET" https://hushhh.cc/. Receive raw text or JSON output without browser overhead.