Burn After Reading & Temporary Secret FAQs

Standard messaging apps and email inherently retain copies of your messages in outboxes, inboxes, and cloud backups. Using BurnNote guarantees that sensitive information (like passwords, API keys, or financial data) is mathematically destroyed from existence the moment it has served its purpose, drastically reducing your attack surface.

BurnNote is built for IT professionals, cybersecurity teams, developers, and everyday users who need a bulletproof way to hand off temporary secrets without leaving a digital footprint behind.

Our platform utilizes a Zero-Knowledge architecture. When you click generate, the native WebCrypto API in your browser encrypts your message. The key is appended as a URL fragment (`#key`). Because browser fragments are never sent to a server, we only receive and store unintelligible ciphertext. Upon the recipient accessing the link, the data is pulled, decrypted locally on their machine, and a delete command is issued to our database.

No. To maintain the highest level of anonymity and minimize our infrastructure footprint, we do not require accounts, emails, or phone numbers. Since we don't know who you are, we have no mechanism to notify you.

Extremely secure. We use AES-256-GCM, the exact same encryption standard used by banks, the military, and the federal government. More importantly, we operate strictly in a Zero-Knowledge paradigm. Since we never possess the decryption key, even a total compromise of our database would yield no readable data.

No. True to the "burn after reading" philosophy, once a payload is successfully accessed and decrypted, it is irrevocably purged from our database. It cannot be recovered by the recipient, by you, or by us.

While the digital link is burned, the recipient is free to screenshot or copy the text while it is visibly rendered on their screen. You should only share secrets with individuals you trust, using BurnNote to secure the transit and storage aspects of the exchange.