ProtectedShare vs Privnote
Both send a note that disappears after it's read. ProtectedShare encrypts in your browser, lets you choose how many reads a secret gets, handles files, and is open source.
Feature comparison
| Feature | Privnote | ProtectedShare |
|---|---|---|
| Encrypts in your browser before upload | ||
| Encrypts in your browser before upload | Not stated | Yes |
| Self-destructs after reading | ||
| Self-destructs after reading | Yes | Yes |
| Expires after a set time | ||
| Expires after a set time | Yes | Yes |
| Allow a set number of reads | ||
| Allow a set number of reads | No | Yes |
| Separate password | ||
| Separate password | Yes | Yes |
| Know when it was read | ||
| Know when it was read | Yes | Partial |
| Encrypted file sharing | ||
| Encrypted file sharing | No | Yes |
| Ask someone to send you a secret | ||
| Ask someone to send you a secret | No | Yes |
| Open source and self-hostable | ||
| Open source and self-hostable | No | Yes |
| Works without an account | ||
| Works without an account | Yes | Yes |
You can check where encryption happens
ProtectedShare encrypts the note in your browser with AES-256-GCM. The key rides in the link after #k=, which browsers don't send to the server, or you choose a password and send it separately. The server keeps ciphertext and a hash it can check before releasing it.
Because the code is public, you don't have to take that on trust. The security page describes exactly what is sent.
More than a one-time note
Credentials often need a second look during setup, so EnvShare lets a secret survive 1 to 100 reads. File drop encrypts files up to 25 MB with a download limit. Secret request flips the direction: you send someone a link, and what they type comes back encrypted to a key only you hold.
No ads
The hosted site shows no ads and the app sets no cookies. If Google Analytics is turned on for the site, the privacy page says so.
Try it on ProtectedShare
Free, with no account. Each tool encrypts in your browser before anything is uploaded. The security model lists exactly what the server stores.
- Secure NotesA note encrypted in your browser. Burns after one read by default; add a password to send separately.
- EnvShare.env files, API keys and passwords, deleted after 1 to 100 reads or at expiry.
- File dropFiles up to 25 MB, encrypted in your browser and deleted after 1 to 100 downloads.
- Secret requestSend someone a link. What they type back is encrypted to a key only your browser holds.
Questions
What makes ProtectedShare a good Privnote alternative?
It covers the same one-time note, and adds what Privnote doesn't: a read count from 1 to 100 for credentials, encrypted file drops up to 25 MB, secret requests, and an open-source codebase you can self-host. Encryption runs in your browser with AES-256-GCM, and there are no ads.
Is Privnote end-to-end encrypted?
We don't make claims about how Privnote encrypts; check their own documentation. For ProtectedShare, your browser encrypts the note before upload and the key travels in the part of the link after #, which browsers don't send to servers. The server stores ciphertext and a hash it can check, never the key.
Does ProtectedShare log my IP address?
We don't write IP addresses into our database. Cloudflare, which hosts the API, sees IP addresses and keeps request logs like any web host. Shares are deleted when they're read out, revoked or expire. The privacy page lists everything that's stored.