ltlsoftware.com

What It Is

One-Time Secret is a one-time sharing tool for passwords, private messages, and private links. Its core idea is to avoid putting sensitive information directly into emails or chat logs. Instead, it generates a secret link; once the recipient views it, the content is deleted. The service has been online since 2012, and its copy says it helps users share more than 50,000 secrets per month. The code is open source and available on Github.

Core Features and Security Design

In terms of protection category, it is a “secure paste / one-time secret sharing” tool, not a full password manager or data loss prevention platform. Anonymous users can set lifetimes such as 5 minutes to 7 days, while secrets created by free accounts can be retained for up to 14 days. Once a secret has been viewed, it cannot be retrieved again. An optional passphrase can be used to encrypt the secret. The service does not store the passphrase in plaintext; it only stores a bcrypt hash, so when a passphrase is used, the provider cannot decrypt the content either. The product intentionally does not support images or files, in order to reduce privacy risks from metadata and further copying/distribution.

Deployment, Integration, and Management

Deployment options include the hosted online service, open-source self-hosting, and custom installs arranged by contacting the official team. Free accounts can send secret links by email and access the API, making it suitable for developers who want to integrate one-time sharing into internal workflows. Management capabilities are relatively simple and mainly focus on lifetime controls. The copy does not mention team permissions, audit logs, alerts, SSO, or a centralized admin console.

Pricing and Best-Fit Users

Pricing information is limited: anonymous use is available, registration is free, and the paid version provides larger message capacity, but there is no public price list or plan breakdown. The maximum message size for both anonymous and free accounts is 100KB. It is suitable for individuals, operations teams, customer support, and development teams that need to temporarily send passwords, API keys, or private links. It is also a good fit for organizations looking to self-host a lightweight tool.

Pros, Cons, and Access from China

Its advantages are simplicity, open-source availability, a clear one-time access model, optional encryption, and API support. Its drawbacks are that it only supports text, has limited capacity, and lacks clear information on enterprise compliance certifications, payment methods, SLA, and support levels. The source text provides no information on access from mainland China, so its availability is considered unknown. If access is unstable, alternatives such as Bitwarden Send, Yopass, PrivateBin, or a self-hosted deployment may be worth considering.