Feature

Secure Sharing

Share passwords, API keys, credentials, and files with end-to-end encrypted one-time links. Control exactly who accesses your secrets and when.

One-time links

Links expire after the first view. Once a secret is revealed, the link is gone — no second chances for unauthorized access.

Expiration controls

Set time-based expiration: links can be valid for hours, days, or weeks. Ideal for time-sensitive credential handoffs.

View limits

Restrict access to a maximum number of views. After the limit is reached, the link becomes inactive automatically.

Passcode protection

Require recipients to enter a passcode before revealing the secret. Share the code separately for layered security.

Email OTP verification

Gate access to specific email addresses. Recipients must verify via a one-time code sent to their inbox.

QR code sharing

Generate a QR code for any secret link — ideal for in-person handoffs or secure onboarding sessions.

View tracking

See exactly when your secret was accessed, how many times, and by whom — with full timestamps and audit history.

Encrypted attachments

Attach files, certificates, or documents to your secure shares. All attachments are encrypted end-to-end.

The problem with email and chat

Every time you paste a password into Slack or email, it lives there permanently. Your sent folder. Their inbox. The chat archive. Backup systems you don't control, on servers you've never seen.

One compromised inbox can expose years of credentials. A forwarded message reaches whoever the recipient decides to forward it to. Nothing expires. Nothing notifies you. Nothing tells you it was read.

What changes with doconvoy

You create a share. Your browser encrypts the secret — we receive an encrypted blob, never the plaintext. The decryption key lives in the link URL, a part of the URL browsers never send to servers.

Your recipient opens the link. Their browser decrypts it locally. You get notified. The link expires.

That's the whole model. Simple for the sender and recipient, structurally sound for everyone involved.

What you can share

  • Passwords and login credentials
  • API keys and tokens
  • Private keys and certificates
  • SSH credentials
  • Database connection strings
  • Confidential documents and files
  • Any text-based sensitive information

Access control options

Beyond basic link sharing, you can layer multiple restrictions:

  • Email verification — only a specific email address can access the secret
  • Passcode — require a separate code you share through another channel
  • View limit — automatically deactivate after N views (1–100)
  • Expiration date — set a hard deadline for link validity
  • Allow/deny lists — restrict or block access by email domain or specific address (up to 20 entries)

Join agencies, consultants, and remote teams who handle sensitive information securely. 3-day trial per workspace. No credit card required.

Start Sharing Securely