Guide
How to send a password securely
The safe way to hand someone a password — without it living in an inbox or chat history forever.
Why texting or emailing a password is risky
It feels harmless to text your partner the Netflix password or email a coworker a login. The problem isn't the moment you send it — it's everything that happens after:
- It never goes away. Once a password is in an email thread or chat, it's there for good. Anyone who later opens that inbox, picks up that phone, or scrolls back through the conversation can read it.
- It gets copied everywhere. Emails are backed up, synced to other devices, and indexed by search. One password can end up in a dozen places you'll never think to clean up.
- You lose control of it. If that account is ever hacked or the phone is lost, your password is right there waiting to be found.
A password should exist just long enough to be used — then disappear. That's exactly what a burn-after-read link does.
How to send a password securely, step by step
- Open SecretDrop. No account or app to install.
- Paste the password into the box.
- Create the link. SecretDrop turns it into a single-use link.
- Send the link to the person however you like — text, email, or chat is fine, because the link isn't the password.
- They open it once and see the password. The moment they read it, it's destroyed. If anyone tries the link again, there's nothing there.
That's the key difference: even if the link is later found in a chat, it's already empty.
Best practices for sharing passwords
- Tell the person a link is coming so they open it promptly — links can also expire on a timer.
- Send the link and any context separately if you're extra cautious (e.g. don't say "here's the Netflix password" in the same message).
- Change the password afterward if it protects something truly sensitive, like a bank or work account.
- Never reuse the same password across important accounts, so one leak doesn't unlock everything.
Frequently asked questions
What's the safest way to send a password?
A one-time, burn-after-read link. It shows the password once and deletes it, so no permanent copy is left behind in email or chat.
Is it safe to text a password?
Not really. The password stays in the message history indefinitely and can be read by anyone who later accesses either phone. Sending a self-destructing link is much safer.
Can I send a password without email?
Yes. With SecretDrop you create a link and share it any way you like — the password itself never has to go into an email or a saved message.
What happens if someone else opens the link first?
The first person to open it sees the password, and it's destroyed immediately. If the wrong person opened it, you'll know something's off because the intended recipient will find an empty link — a signal to change the password.