Handing over access
Files via Transfer, the password separately via a one-time link.
Birdsuite Seal
Share a secret that can be read exactly once
Share passwords and secrets with a one-time link: encrypted in your browser, the key never reaches our server — deleted after the first open.
- Zero-knowledge
- No account
- Readable once
Alternative to Privnote, Onetime Secret, Password Pusher
Free
Free: what Birdsuite Seal does without a subscription
One-time links without an account, valid up to 7 days
Included for free
- Zero-knowledge encryption in your browser
- Up to 32,000 characters per seal
- Valid for 1 hour, 24 hours or 7 days
- Opens only on click
- With a free account: email on open, names and "My seals"
Free, with no catch
- No account Open the tool and start. No sign-up, no email address, no password.
- No ads No banners, no pop-ups, no sponsored results — in the free plan too.
- No tracking No tracking cookies, no profiles. We only count visits, cookieless and with shortened IP addresses.
- Servers in the EU (Germany and France) What needs a server runs on servers in the EU (Germany and France). Exceptions are listed openly under data and privacy.
- No payment details No credit card and no trial: the free plan stays free for as long as you use it.
There is no paid plan: everything Birdsuite Seal does is free, with no trial that runs out.
Open Seal for freeBirdsuite Seal is a one-time link service by Berlin Bird Studios: you share passwords, credentials or short notes that can be read exactly once. The text is encrypted in your browser with AES-GCM, and the key lives only in the link and never reaches our server. The content is deleted when it is first opened.
The problem
Passwords and credentials often end up in a chat or an email and stay readable there for anyone with access to the inbox. Some one-time link services also only encrypt on their own server.
The solution
With Birdsuite Seal your browser encrypts the secret before it is sent, and the key lives only in the link after the #. The recipient opens it with one click, exactly once; after that the content is deleted from the server.
How it works
-
1
Enter the secret
Paste a password, API key or note and choose whether the link lasts 1 hour, 24 hours or 7 days.
-
2
Seal and share
Your browser encrypts the text and creates a link. Send it any way you like.
-
3
Open once
The recipient clicks "Break the seal" and sees the secret. After that, the link only shows when it was opened.
Features
Zero-knowledge encryption
AES-GCM with a 256-bit key, right in your browser. The key sits in the part of the link after the #, which browsers never send to the server.
Opens only on click
Link previews in chat apps and mail scanners only load the page. The secret appears only when the recipient clicks the button.
1 hour to 7 days
You choose 1 hour, 24 hours or 7 days. After that, the seal can no longer be opened.
Exactly once
The first open deletes the encrypted content. Anyone who opens the link afterwards only sees when it was opened.
Free, no account
Creating and opening seals works without signing up, without ads and without tracking cookies.
Overview with an account
With a free Birdsuite account you see your seals under "My seals" and can revoke unopened ones at any time.
Notification on open
Also free with an account: you get an email as soon as your seal is opened, and you can name your seals to tell them apart.
Data and privacy
- Processing
- Encryption and decryption happen only in your browser and in the recipient's browser. Our server in Strasbourg, France only stores and delivers the encrypted text.
- Storage
- We store only the encrypted text and its expiry time, plus the link to your account if you are signed in. The content is deleted on the first open; expired seals can no longer be opened and are unreadable without the key from the link.
- Processors
- Host Europe GmbH (hosting and email delivery, Strasbourg, France). Nobody gets the key except the people who have the link.
Pricing
Free – no subscription
One-time links without an account, valid up to 7 days
- Zero-knowledge encryption in your browser
- Up to 32,000 characters per seal
- Valid for 1 hour, 24 hours or 7 days
- Opens only on click
- With a free account: email on open, names and "My seals"
What Seal can’t do
- No files: Seal is made for text. Send files with Birdsuite Transfer.
- Up to 32,000 characters per seal: enough for passwords, keys and short notes, not for long documents.
- Valid for 7 days at most: Seal is not made for longer periods.
- No protection after reading: what the recipient has seen, they can copy.
- Anyone with the full link can open it. If someone else opens it first, the recipient sees that the seal was already opened.
Birdsuite Seal compared
| Criterion | Birdsuite Seal | Typical alternatives |
|---|---|---|
| Account needed | No | Usually no |
| Where encryption happens | In your browser, key only in the link | Sometimes only on the server |
| Safe from link previews | Yes, opens only on click | Not with every provider |
| Longest lifetime | 7 days | Depends on the provider |
| Notification on open | Free with an account | Sometimes paid |
Last updated: 21 October 2026
Who is it for?
Agencies and IT service providers
Send credentials to clients without leaving them in an inbox forever.
Teams and onboarding
Give new colleagues starter passwords or Wi-Fi keys that are gone once read.
Family and friends
Pass on the router login, the streaming account or the code for the door lock.
Better together
Birdsuite Note
Markdown notes that start instantly: no account in the browser, synced on servers in the EU (Germany and France) with a free account — shareable and scriptable via API.
Birdsuite Transfer
Send large files without an account — free up to 5 GB, up to 1 TB per transfer with Max. Stored in Germany, with download notifications.
Birdsuite Scan
QR codes with colour and logo that really scan — free, no account, no expiry. With Pro: change the target after printing and count scans without personal data.
Frequently asked questions
- Can Birdsuite read my secret?
- No. Your browser encrypts the text before it is sent, and the key lives only in the part of the link after the #, which browsers do not send to servers. We only store data that is unreadable without that key.
- What if someone else opens the link first?
- Then the seal is broken, and the recipient sees that it was opened and when. In that case, change the password and send a new seal.
- Why don't link previews burn my seal?
- Because the secret only appears after a click on "Break the seal". Chat apps and mail scanners only load the page for the preview, and the page does not contain the content yet.
- How long is a seal valid?
- 1 hour, 24 hours or 7 days, chosen when you create it. After that, it can no longer be opened.
- How much text fits?
- Up to 32,000 characters, plenty for passwords, credentials, API keys or short notes. For files, use Birdsuite Transfer.
- Can I be notified when it's opened?
- Yes, for free: sign in with a free Birdsuite account, and you get an email as soon as the seal is opened and can give it a name.
- Should I send username and password separately?
- Yes, that is safer. For example, send the username by email and the password as a seal, so one intercepted channel alone is useless.
- Can I recover a lost link?
- No. Only you and the people with the link know the key; we have never seen it. Just create a new seal.
Ready? Birdsuite Seal runs right in your browser.
Last updated: 21 October 2026