DH{}DataHunter

XNote — secret messages that self-destruct

Write a message, set an expiry time, optionally add a password, and share the link. The note is encrypted in your browser and can only be decrypted by the recipient. Nothing is stored on any server.

Create a secret note

What XNote does

  • Encrypts your message with AES-256-GCM before it leaves your browser
  • Stores nothing on a server — the encrypted message lives in the link itself
  • Destroys the message after first read (on the same device)
  • Supports optional password protection and automatic expiry

Questions

Is my message stored on a server?
No. The entire encrypted message sits in the URL hash fragment. The server never sees the content, the key, or the password.
What if the link is intercepted?
Without the key (or password) the encrypted data is unreadable. The key is also in the URL hash, so share the full link securely.
How does self-destruction work?
After the message is decrypted on a device, it is marked as read in local storage. Opening the same link again shows a destruction notice. On another device the message can still be read once.