PasswordLink

PasswordLink (password.link) is an EU-hosted, zero-knowledge platform for sharing passwords, API keys, and files through one-time self-destructing links protected by client-side AES-256-GCM encryption, with view notifications, white-labeling, a REST API, and team controls like SSO and geo-blocking.

What is PasswordLink?

PasswordLink is a security-focused platform for sending and receiving sensitive information through one-time, self-destructing links. Encryption happens client-side with AES-256-GCM in the browser before any data leaves the device, and the private key part is stored in the URL fragment so the vendor never sees — and cannot decrypt — the plaintext. You can share passwords, API keys, contracts, and files with per-link expiry, passwords, CAPTCHAs, and view limits; request credentials from clients via Secret Request links; generate many links at once from a CSV parsed locally; and hold end-to-end encrypted chats that vanish on close. Notifications alert you via email, Slack, or webhook when a secret is created, viewed, or expires, and a REST API plus client-side encryption enables integration into other applications. Team features include accounts up to a set size, centralized settings, SSO, audit logs, geo-blocking, IP/email whitelisting, custom SMTP, white-labeling, and custom domains. The service is EU-hosted and GDPR-compliant and claims over a decade in production since 2016, with customer logos including monday.com, BioNTech, and Johnson Controls. The Dealify lifetime deal costs $173 one-time for Pro-level access with 500 secrets/month, custom pages, hide-branding, notifications, API, logs, and a team of up to 20, backed by a 30-day money-back guarantee and a 60-day code redemption window.

Key Features

• *One-Time Links** — Self-destructing URLs for passwords, API keys, and files that are destroyed after the set number of views.
• *Client-Side Encryption** — AES-256-GCM encryption happens in your browser before data leaves your device; the servers never see plaintext.
• *Secret Requests** — Send a link that securely collects credentials or documents from clients, delivered via a one-time link only you can open.
• *Customizable Expiry** — Set expiration times, passwords, CAPTCHA, and view limits per link, or invalidate links manually.
• *Notifications** — Get email, Slack, or webhook alerts when a secret is created, viewed, or expired.
• *White-Label Branding** — Remove PasswordLink branding and serve everything on your own domain.
• *REST API** — Create, encrypt, and decrypt secrets programmatically to integrate sharing into your own apps.
• *Bulk Secrets** — Generate many one-time links at once from a CSV file parsed locally in the browser.
• *Secure Chat** — End-to-end encrypted conversations that vanish when the chat closes, with no account required.

Who is it for?

• IT and security teams that routinely send credentials, API keys, and contracts through email, Slack, or support tickets
• Managed service providers and agencies that need to collect client credentials securely and white-label the experience
• Small and mid-size teams that want notifications, logs, and an API without enterprise prices
• Anyone already using self-destructing link tools who wants client-side encryption, custom domains, and branding
• Teams needing EU-hosted, GDPR-aligned secure sharing with SSO, geo-blocking, and whitelisting

Who is it NOT for?

• Teams sharing more than 500 secrets per month — the cap will bite
• Buyers who want a full password manager with vault storage rather than one-time sharing
• Enterprises requiring documented compliance certifications like SOC 2 and a formal vendor security review
• Anyone who won't enforce recipient discipline — one-time links cannot stop screenshots or re-sharing
• Marketers or casual users with only occasional sharing needs, where the free 8-secrets account is plenty