Description
Share secrets securely with end-to-end encryption. Messages self-destruct after being read or after a set expiration time.
No-Login Task
"Share encrypted self-destructing secrets"
Editorial Review & Verification
Hands-on VerifiedSharing confidential credentials and passwords via self-destructing end-to-end encrypted links.
+ Key Strengths (Pros)
- ✓ Client-side in-browser cryptography ensures secret plaintext never touches remote infrastructure
- ✓ Decryption key is stored in the URL hash fragment, preventing server-side interception or logging
- ✓ Configurable expiration intervals (one hour, one day, one week) with automatic burn-after-reading destruction
- ✓ Supports two-channel verification by providing separate short links and isolated decryption keys
− Limitations (Cons)
- − Landing page loads Google Analytics (G-Z052GLVH1K) tracking scripts before entering the app
- − Once burned upon opening, destroyed secrets cannot be recovered under any circumstances
Deep Privacy & Sandbox Audit & Product Power & Utility Review
Zero-knowledge client-side encryption verified. Plaintext is encrypted in the browser prior to ciphertext transmission to api2.yopass.se/create/secret; landing page carries Google Analytics telemetry.
Observed 857ms main thread freeze during client-side OpenPGP key generation and encryption, followed by POST payload dispatch to api2.yopass.se/create/secret with 73-character one-time hash URL copied cleanly to clipboard.
- ✓ Full software stack can be deployed on private infrastructure
- ✓ User retains sovereign control over database and network egress
- ✓ No vendor lock-in or forced account identity
- ✓ Audited privacy policy protecting user confidentiality
- ✓ No mandatory email, telephone, or identity correlation
- ✓ Strict limits on operational telemetry
- ✓ Publicly auditable code repository at https://github.com/jhaals/yopass
- ✓ OSI-recognized open license: Apache-2.0
- ✓ 3,133 GitHub community stars
- ✓ Tool is online and accessible
- ✓ Monitored continuously by NoLoginTools automated prober
- ✓ No scheduled downtime or access gating detected
NoLogin Lab™ Verified Telemetry & Empirical Audit
Stateless execution; no user account or tracking identifier recorded on remote infrastructure.
Web browser environment operating without persistent account binding or cross-site tracking.
Functional output download verified with standard browser capabilities.
Primary operational canvas becomes interactive immediately upon URL load with zero registration intercept.
Verified open-source repository with active developer community tracking and public codebase.
Verification Details
Zero-knowledge client-side encryption verified. Plaintext is encrypted in the browser prior to ciphertext transmission to api2.yopass.se/create/secret; landing page carries Google Analytics telemetry.
Tags
Health History
FAQ
- Does Yopass require an account?
- No. Yopass has been verified by nologin.tools to provide its core functionality — Share encrypted self-destructing secrets — without requiring any login or signup.
- Is Yopass free to use?
- Yopass is listed on nologin.tools as a tool you can use without creating an account. Check the tool's own site for details on pricing or premium features.
Similar Tools
Free question generator with 3,750+ conversation starters across 34 categories: deep talk, funny, dating, party games (Would You Rather, Truth or Dare, Never Have I Ever), team building, and more. Pick a category and generate random questions instantly, no signup.
Translate text to Morse code and Morse code to text instantly in your browser.
Free, open-source video conferencing that works directly in your browser. Create a room and share the link — no account, download, or plugin needed.
IcyZip pairs two browsers by QR code or link to move live text or send one file between phones and computers. No account or app is required. Current clients encrypt content in the browser before the server relays ciphertext; the service can still see connection and file-offer metadata. It requires internet access and a second device or browser, and is not cloud storage, folder sync, background clipboard, or offline/LAN transfer.