SecretDrop is a zero-knowledge secret sharing tool for developers. Files are encrypted in the browser using AES-256-GCM before they ever reach the server.
The server stores only encrypted blobs and can never read your content, filenames, or passwords.
Upload files, set a password, share a link.
No accounts required for recipients.
Free tier available, no credit card needed.
A startup from Germany that is founded by Aleksandar Jovanovic, Jake Holmes.
True zero-knowledge encryption that happens entirely in the browser using only the Web Crypto API โ no third-party crypto libraries, no server-side access to your data. It's as simple as upload, set password, share link โ but with enterprise-grade cryptography underneath.
SecretDrop is an early-stage product โ there's no public customer list to share. It's built for and used by indie developers, freelancers, and small agencies.
The real competitor is "paste it in Slack." Vault is heavy, enterprise tools are expensive and require setup. SecretDrop gives you zero-setup, encrypted-by-default sharing with a free tier โ no accounts for recipients, no credit card, no infrastructure to manage.
Developers, freelancers, and small dev teams who need to share API keys, .env files, and credentials quickly and securely without spinning up a Vault instance or paying for enterprise tooling.
Built by a dev agency founder in Germany who got tired of watching teammates share database credentials and API keys over Slack every week. Not because they didn't care about security โ because there was no frictionless alternative. SecretDrop was built to fill that gap.
React 19, Vite 6, Tailwind CSS 4, and shadcn/ui on the frontend. NestJS 11 with TypeScript on the backend. Astro 5 for the landing page. Supabase for auth, database, and storage. Web Crypto API (AES-256-GCM, PBKDF2) for all encryption. Polar for billing.
SecretDrop.dev appears to be a niche utility for securely sharing sensitive text or secrets via a self-destructing, one-time link, offering a simple and useful solution for temporary secure sharing rather than a full-featured product with broad ratings or reviews available.
We have collected here some useful links to help you find out if SecretDrop.dev is good.
Check the traffic stats of SecretDrop.dev on SimilarWeb. The key metrics to look for are: monthly visits, average visit duration, pages per visit, and traffic by country. Moreoever, check the traffic sources. For example "Direct" traffic is a good sign.
Check the "Domain Rating" of SecretDrop.dev on Ahrefs. The domain rating is a measure of the strength of a website's backlink profile on a scale from 0 to 100. It shows the strength of SecretDrop.dev's backlink profile compared to the other websites. In most cases a domain rating of 60+ is considered good and 70+ is considered very good.
Check the "Domain Authority" of SecretDrop.dev on MOZ. A website's domain authority (DA) is a search engine ranking score that predicts how well a website will rank on search engine result pages (SERPs). It is based on a 100-point logarithmic scale, with higher scores corresponding to a greater likelihood of ranking. This is another useful metric to check if a website is good.
The latest comments about SecretDrop.dev on Reddit. This can help you find out how popualr the product is and what people think about it.
Do you know an article comparing SecretDrop.dev to other products?
Suggest a link to a post with product alternatives.
Is SecretDrop.dev good? This is an informative page that will help you find out. Moreover, you can review and discuss SecretDrop.dev here. The primary details have not been verified within the last quarter, and they might be outdated. If you think we are missing something, please use the means on this page to comment or suggest changes. All reviews and comments are highly encouranged and appreciated as they help everyone in the community to make an informed choice. Please always be kind and objective when evaluating a product and sharing your opinion.