The secure workspace
your team actually needs
Share secrets, manage passwords, store API keys, and encrypt documents — all in one zero-knowledge platform. Nothing leaves our servers unencrypted. Ever.
One platform, four pillars of security
Everything IT and engineering teams need to stop sharing credentials over Slack.
One-Time Secrets
Create self-destructing, password-protected links for sensitive data. Viewed once, then gone forever. No account required for the free tier.
- Auto-deletes after viewing
- Optional password protection
- IP allowlisting & webhooks
- Custom expiration (1h–30 days)
Password Manager
Store logins, service accounts, and credentials with military-grade encryption. Search, categorize, and share securely with your team.
- AES-256-GCM at rest
- Strong password generator
- Team sharing with roles
- Category & search
API Key Vault
Persistent encrypted storage for API keys and secrets. Pull them into CI/CD pipelines with our REST API or export as .env files.
- REST API with key auth
- .env & JSON export
- Environment tagging
- Access audit log
Document Vault
Upload any file type — contracts, certificates, SSH keys, configs — and encrypt it at rest. Share with time-limited links you can revoke instantly.
- Any file type, up to 25 MB
- Time-limited share links
- Instant revoke
- Download tracking
How it works
Three steps to secure sharing — no crypto knowledge required.
Enter your data
Paste a secret, upload a file, or save a password. Everything is encrypted the moment it hits our server using AES-256-GCM.
Share the link
Send the generated secure link to your recipient. Add a password or IP restriction for extra protection.
Poof — it's gone
Once viewed, the secret self-destructs. No traces, no copies, no plaintext ever stored on our servers.
Zero-knowledge. Zero compromise.
We literally cannot read your data — even if someone asked us to.
AES-256-GCM
The same authenticated encryption used by banks and governments. 256-bit keys, unique nonces, tamper detection built in.
Zero-Knowledge Architecture
Your data is encrypted before storage. We hold only ciphertext — never plaintext. Not in memory, not in logs, not anywhere.
Auto-Destruction
Secrets are permanently deleted after viewing or expiration. No backups, no recovery — exactly how it should be.
IP Allowlisting
Restrict secret access to specific IPs or CIDR ranges. Perfect for compliance-heavy environments.
Full Audit Trail
Know exactly who viewed your secret — timestamp, IP address, user agent. Complete accountability.
Webhook Alerts
Get notified instantly in Slack, Teams, Discord, or any webhook when your secrets are accessed.
Built for teams that take security seriously
Shared vaults, role-based access, per-seat billing, and a superadmin panel — all included.
Free
- 10 secrets/day
- 5,000 character limit
- 24-hour expiration
- AES-256-GCM encryption
- Zero-knowledge
- No account required
Premium
- Everything in Free, plus:
- 1,000 secrets/day, 50K chars
- Password Manager (500 entries)
- API Key Vault (500 entries)
- Document Vault (100 files, 25 MB)
- Team workspace with roles
- REST API + .env export
- IP allowlisting & webhooks
- Full audit trail
- Custom expiration (1h–30 days)
- Priority support
Who uses PoofKey?
From startups to enterprise — anyone who shares sensitive data.
Engineering Teams
Store API keys in the vault, export to .env files, and integrate secrets into CI/CD pipelines via REST API.
DevOps & SRE
Manage production credentials, SSH keys, and config files. Tag by environment, restrict by IP.
IT & Support
Share temporary passwords and access codes with end users via self-destructing links.
Legal & Finance
Encrypt contracts, NDAs, and financial documents. Share with time-limited links and audit every download.
Consultants & Agencies
Securely exchange credentials and deliverables with clients. No more passwords in email.
Security-Conscious Individuals
Share Wi-Fi passwords, bank details, or personal documents without leaving a trace.
Create a One-Time Secret
Paste sensitive data below. It gets encrypted instantly and destroyed after viewing.
Secure share created
Send this link to your recipient.
Stop sharing secrets over Slack and email.
Join teams that trust PoofKey to protect their most sensitive data.