ashdrop

end-to-end encrypted · zero-knowledge · open source

Receive a secret.
Read it once.

Share one link. People send you an .env — encrypted in their browser, readable only in yours, and gone after a single read. We never see it.

Receive a secret

How it works

  1. 1 Generate your receive address — once, right here.
  2. 2 Share your receive link anywhere — it's a public key, not a secret.
  3. 3 They open it and drop an .env — encrypted in their browser.
  4. 4 Only your browser can decrypt it. The drop turns to ash after one read.

The path a secret takes

frontend .env
backend .env
ashdrop
recipient

Your app's secrets stay encrypted end to end — Ashdrop only ever relays ciphertext to the recipient.

Safe to send over WhatsApp

Paste the link into WhatsApp, Slack, or email — it carries no key. The chat app, and anyone who intercepts the message, only ever sees a reference to ciphertext. Only the recipient's browser holds the key to open it, so even a compromised chat can't leak the secret.