SecretPaste

SecretPaste for MSPs

Client access, without the loose ends.

Deliver credentials to clients and prove it. Give your service desk a consistent way to hand over sensitive text or a file.

Start sharing with clientsHow it works

SecretPaste for MSPs

Finish the ticket without leaving credentials in it.

Service work creates a steady stream of temporary access: initial credentials, recovery details, and environment files. Share a private link in the ticket while keeping the plaintext out of its long-lived history.

Encryption

A cleaner client handover

Send access details through a link that expires. The ticket can keep the conversation and delivery reference without storing the credential itself.

In your browser

Recipient

A recognizable sender

Use workspace branding and a verified domain for client-facing handoffs. The recipient sees a familiar identity around the private payload.

An explicit reveal

After delivery

Evidence around delivery

Use available receipt and recipient controls to record reveals and restrict access. A receipt describes the event without preserving the secret.

The link expires

A straightforward handoff

From your browser to theirs.

  1. 01

    Prepare the client handoff

    Paste the access details or select a file. Keep your ticket notes separate from the private payload.

  2. 02

    Apply your delivery rules

    Choose an expiry and the recipient controls included with your plan, then create the link.

  3. 03

    Send and follow through

    Share the link with the client. Review available delivery events and rotate credentials when your access process requires it.

“The recipient gets the secret. Our servers never get the plaintext or the decryption key.”

— The SecretPaste browser encryption boundary

Before you share

A few useful answers.

Can recipients open a link without joining our workspace?

Yes. Standard links do not require a recipient account. A gated link requires the recipient to verify access to the allowed mailbox.

Can we share from our own domain?

Workspace plans with custom-domain support let you verify and use a domain you control. The payload remains encrypted in the browser.

Does SecretPaste replace a password manager?

No. It handles a temporary handoff. Store and rotate ongoing credentials in your existing password manager or access management system.

More ways to make it private.

Text secrets

Encrypted in your browser, gone after one view. Send a password, a token, or an environment file without leaving its contents in a message thread.

Explore feature

File transfer

Streamed to storage, never through our API. Share a file or a folder with browser encryption and a lifetime you control.

Explore feature

Burn after reading

One atomic claim per view, then the ciphertext is gone. Give sensitive text or a file a clear end to its availability.

Explore feature

Make the next client handoff easier.

Share text or a file with a link that has an ending. Start with the browser composer.

Start sharing with clients