Sneak
📌 Drag Sneak to Bookmarks
Zero-Knowledge AES-GCM

Create a Secret

Data is encrypted directly in your browser.
The key stays in the URL fragment (`#`) and never hits our server.
Sneak.pw does not store any data.

Burn-on-read

What is Sneak?

Sneak is a zero-trust, ephemeral secret sharing utility designed to eliminate plain-text credential leaks across Slack, Teams, email, or chat logs.

🔒 Client-Side AES-GCM-256

Your browser encrypts data before sending it. The decryption key resides exclusively in the URL hash (`#key`), which web browsers never transmit to HTTP servers.

🔥 Automatic Destruction

With Burn-on-Read enabled, the ciphertext is deleted from our database the exact millisecond it is requested.

Quick-Share Bookmarklet

Share secrets without leaving your current webpage or chat app.

How to install in 3 seconds:

1. Click and drag the 📌 Drag Sneak to Bookmarks button at the top onto your browser's Bookmarks Toolbar.
2. Click it while on any site (Slack, GitHub, Jira) to open the micro overlay.
3. Paste your secret, hit Generate, and the encrypted link will automatically be copied to your clipboard.

Developer JS SDK

To guarantee Zero-Trust, secrets must be encrypted on the client side before transmission. Integrate secret creation into your apps with our lightweight, zero-dependency JS SDK.

Quick Start (Browser)

Include the SDK in your page and generate encrypted links locally in two lines:

<!-- 1. Include SDK --> <script src="https://your-website.com/js/sneak-sdk.js"></script> <!-- 2. Encrypt & Generate Link --> <script> Sneak.createSecret("My super secret text") .then(url => console.log("Zero-Trust Link:", url)) .catch(err => console.error(err)); </script>

Custom Options

Control expiration (TTL in seconds) and burn-after-read status:

Sneak.createSecret("Secret text", { ttl: 3600, // Expire in 1 hour (default: 86400 / 24h) burn: true // Self-destruct on read (default: true) });