Private Message Link – Send a One-Time Secret Message
Encrypt a private text message in your browser and create a one-time link. The encrypted message is deleted from the server on its first retrieval or when it expires.
Write a private text message, create an encrypted one-time link, and send the complete result through WhatsApp, SMS, email, or another messaging service. The encrypted message is removed from the ORVITech server when the link retrieves it for the first time.
How to Create a Private Message Link
Enter the message, choose how long it should remain available if unopened, and press Create Private Link. ORVITech encrypts the text inside your browser and returns a ready-to-share link.
How to Send the Private Message
Use the copy button to copy the complete result, including the explanatory text and full ORVITech link. Send it only to the intended recipient through a service that preserves the entire link.
What Happens When the Link Is Opened?
The viewing page retrieves the encrypted message from the server and the server deletes it atomically during that first retrieval. The browser then uses the key contained in the link to decrypt and display the text.
The Message Is Consumed on Retrieval
Deletion occurs when the server returns the encrypted message, before the browser confirms that decryption and display succeeded. If the connection fails after retrieval, the link is modified, or the wrong valid-length key is used, the message cannot be recovered.
Browser-Based AES-GCM Encryption
The message is encrypted in the sender’s browser using AES-256-GCM with a newly generated key and initialization vector. The server stores the ciphertext and encryption data, but not the decryption key.
Why the Complete Link Is Required
The decryption key is stored after the # symbol in the shareable URL. URL fragments are not included in normal requests to the server, so ORVITech receives the message identifier but not that key. Removing or changing any part of the link may make decryption impossible.
Who Can Read or Consume the Message?
Anyone with the complete link can retrieve and decrypt the message. A person or automated system that opens the link first may consume it before the intended recipient, so protect the link and share it through a trusted channel.
Automatic Expiration
If nobody retrieves the message, it remains available until the selected expiration time: 1 hour, 24 hours, 3 days, 7 days, or 30 days. After expiration, the encrypted content is unavailable and is removed from the database.
No Sender or Recipient Field
Creating a link does not require an ORVITech account, sender name, recipient name, email address, or telephone number. The utility does not place sender or recipient identity inside the encrypted message record unless you write identifying information in the message itself.
Private Message Example
Write your message, choose 24 hours, and press Create Private Link. Copy the complete result and send it to the recipient. When the link retrieves the encrypted message for the first time, the server deletes its stored copy and the recipient’s browser decrypts the text.
Frequently Asked Questions
How does a one-time private message work?
Your browser encrypts the text and creates a link containing the message identifier and decryption key. The server stores only the encrypted message and deletes it during its first retrieval.
Can the private message be opened twice?
No. The server atomically retrieves and deletes the encrypted message. A second request receives an unavailable response.
When exactly is the message destroyed?
The encrypted server copy is deleted during the first successful retrieval request, before the recipient’s browser confirms that it decrypted and displayed the message.
What happens if the recipient refreshes the page?
The server copy has already been deleted, so refreshing or reopening the link cannot retrieve the message again. The recipient should read or copy the displayed text before leaving the page.
What does the expiration setting mean?
It controls how long an unretrieved message remains available. First retrieval deletes it immediately even if the selected expiration time has not passed.
Can ORVITech decrypt my message?
The server does not receive or store the decryption key under the normal link flow. It stores the ciphertext and initialization vector, while the key remains in the URL fragment sent to the recipient.
Can anyone with the link read the message?
Yes. Anyone possessing the complete link can retrieve and decrypt the message. Treat the link itself as the secret.
Can a link preview or security scanner consume the message?
Potentially. Any browser or automated system that fully opens and executes the viewing page may trigger the one-time retrieval. Share the link through a trusted channel and avoid services that automatically open links when possible.
What happens if the link is incomplete or modified?
A missing or malformed key is rejected before retrieval. However, a modified key with the correct technical length may retrieve and consume the ciphertext but fail to decrypt it.
Can I recover an opened or expired message?
No. ORVITech does not provide recovery after the encrypted message has been retrieved or expired.
Does the link identify the sender?
No sender identity is embedded automatically. However, the message text or the service used to share the link may reveal who sent it.
What is the maximum message size?
The message can contain up to 14 KB of UTF-8 text. The utility does not support file attachments.
Can I send the link through WhatsApp, SMS, or email?
Yes. Copy the complete result and send it through any service that preserves the full URL, including the key after the # symbol.
Do I need an ORVITech account?
No. Creating or opening a private message does not require an ORVITech account.