Built by Flowdesk — ex‑FlowCrypt (iOS + Chrome Ext.). Privacy apps, E2EE systems, native & mobile.See workcontact@flowdesk.tech
Flowvault

Privnote alternative

Send a secret once, then let it disappear.

Encrypted Send is Flowvault's account-less one-shot sharing tool. Paste a password, recovery code, or API key, choose a view cap and expiry, and share a link whose decryption key lives in the URL fragment.

The AES-256 key stays in the browser URL fragment, not on our server.
Hard-deletes after the final view or expiry window.
Optional password gate if the link may pass through untrusted chat.

30-second proof

Feel plausible deniability before you trust the claim.

Open the same demo vault twice: first with CorrectPassword, then lock and unlock with DecoyPassword. Same URL, same ciphertext on the server, two completely different notebooks.

What makes it different from a normal paste link

Flowvault encrypts the note in your browser before upload. The server stores ciphertext plus expiry and view-limit metadata; it never sees the plaintext or URL-fragment key. After the final allowed view, the note is deleted from the database rather than archived.

Best use cases

Use it for short secrets that should not sit in Slack, email, ticket comments, or a shared document forever: temporary database credentials, API keys, recovery codes, one-time client handoffs, or a seed phrase split where the other half travels elsewhere.

When to use a full vault instead

If the recipient needs a durable private notebook, use a Flowvault vault instead of Encrypted Send. A send is intentionally disposable; a vault is for notes you want to reopen later, back up, or protect with a decoy password.

Recipient loop

When a recipient opens a note, they now see a small, privacy-respecting prompt to send their own encrypted note. No tracking, no forced account, just a useful next step.

Secure send checklist

  1. 1Paste only the secret you intend to share.
  2. 2Keep the default one-view limit for credentials.
  3. 3Use a short expiry if the recipient is online now.
  4. 4Add a password if the link may be forwarded or logged.
  5. 5Share the password through a separate channel.

Trust signals worth checking

Flowvault is MIT-licensed and open end-to-end: frontend, Cloud Functions, Firestore rules, and crypto code are public. The server stores opaque ciphertext; your password and plaintext stay in the browser.