Create encrypted messages encoded as URL fragments. The secret never touches a server - decryption happens locally.
A complete share link is the container for the secret. Dead Drop Encrypted Message encrypts entered plaintext and places the encoded result after the # in a generated URL. Opening that full URL lets the recipient's browser recover the message locally, while normal navigation does not send the fragment to the web server. The important surprise is that "dead drop" does not mean automatically one-time or unrecorded. Anyone or any application that obtains the complete URL may preserve it, so the link itself must be treated as sensitive.
The portion of a URL beginning with # is its fragment identifier. URI processing separates that fragment before the resource is requested, so the ordinary page request contains only the part before #. This tool uses the browser-visible fragment to carry the encoded encrypted message. That keeps the payload out of the navigation request, but it does not conceal which site or page was visited.
During creation, the tool encrypts the plaintext in the current browser and serializes the result into the generated link's fragment. When the recipient opens the complete link, the tool reads that fragment and performs decryption locally. Because no server stores the message, the link is the handoff artifact. The # and every character following it must survive copying; truncation or rewriting can make the message unreadable.
No. This tool performs encryption and decryption in the browser and does not upload the message. In normal URL navigation, the browser also excludes the fragment, including the leading # and everything after it, from the request sent to the page's server. The complete URL can still be visible to your browser, clipboard, history, and whichever application you use to share it.
No. A browser-only link cannot enforce global single-use access because another copy of the complete URL can be opened again. Closing the page or deleting your local copy does not invalidate copies held elsewhere. If strict expiration, revocation, recipient authentication, or proof of deletion is required, this link alone does not provide those controls.
The behavioral notes were checked against the browser implementation. Standards and primary references below define the relevant format, formula, or platform behavior.
Generate strong, random passwords with customizable length, character sets, and complexity requirements.
Analyze password strength with entropy scoring, crack-time estimates, and improvement suggestions.
Create cryptographically random strings for API keys, tokens, salts, and unique identifiers.
Create QR codes for URLs, text, Wi-Fi credentials, vCards, and more with customizable size and colors.
Scan and decode QR codes from uploaded images or your device camera to extract embedded data.
Compute MD5, SHA-1, SHA-256, and SHA-512 checksums to verify file integrity and detect tampering.