Zero Trust.
Zero Residue.
How your sensitive data is stored once, shared once, and permanently erased — by design.
From input to ash
Paste your API key, password, private note, or any sensitive text into AshVault's editor. Nothing leaves your browser until you confirm.
📝 Stored in memory until submissionA cryptographically random UUID v4 is generated and returned as your shareable link. This ID is impossible to guess — it's the only key to your vault.
🎲 UUID v4 · 2¹²² possible combinationsMongoDB's TTL index automatically expires and deletes your secret after the chosen duration — 1 hour, 24 hours, or 7 days — even if it's never read.
⚙️ MongoDB TTL Index · Automated cleanupWhen the recipient visits the unique URL, the server looks up the secret and verifies it hasn't already been read and the TTL hasn't expired.
🔎 Single lookup · No residueThe moment the secret is served, it is permanently and irreversibly deleted from the database. No copies, no logs, no recovery. It's ash.
💥 findOneAndDelete · Atomic · IrreversibleThe stack behind the vault
Ready to share securely?
Create your first self-destructing secret in seconds.