textdrop.sh
Guide · Passwords

How to share a password securely.

Most quick ways to send a password (email, Slack, SMS) leave a copy of it sitting in someone's history forever. Here's the fix in under a minute.

May 15, 20264 min read

The short answer

Send a one-time encrypted link instead of the password itself. Paste it into textdrop.sh, turn on burn-after-read, set a short expiry, and send the access password through a different channel.

Do this. Not that.

  • Do
  • One-time encrypted link (burn-after-read)
  • Password manager share, if both sides use one
  • Signal / iMessage, then delete the message after
  • Don't
  • Email. Sits in plaintext on four servers.
  • Slack or Teams. Searchable forever by default.
  • SMS. Plaintext over the carrier, backed up to the cloud.

Share a password now

Share your password safely with textdrop.

Paste the password below. Burn-after-read, password protection, and a 1-hour expiry are already on. Hit Share, then send the link.

Send the link in one channel and the access password in another.

Why this matters

A password used for ten seconds shouldn't live somewhere for ten years. Sending it through email or chat doesn't move it. It copies it onto every device and server in the chain. A one-time encrypted link sends a pointer to the password instead, and the secret is retrieved once, then gone.

Common questions

Is it safe to send a password over email?+

No. Email sits in plaintext on the sender's device, the recipient's device, and both providers' servers, exposed to any future breach, backup, or admin search.

What about Slack or Teams?+

Chat tools retain messages by default and are searchable by anyone with workspace access. Treat them as a permanent log unless you've confirmed retention is off.

What if my recipient doesn't use a password manager?+

That's exactly when a one-time encrypted link helps. They click, read it once, and the paste self-destructs. No account, no install.

Should the link and access password travel together?+

No. Send the link in one channel (email) and the access password in another (Signal, SMS, in person). A single compromised inbox shouldn't be enough.

Keep reading