Protect & Encrypt
How to Share an Encrypted Message With a Link
Create an encrypted message link, test the recipient workflow, and send the passphrase separately without putting readable text in the URL.
An encrypted message link saves the recipient from copying a long block of ciphertext into a separate field. The link opens Encrypt Online's Decrypt page with the encrypted message already loaded. The recipient enters the passphrase and decrypts it.
The link does not contain the passphrase or readable message. You still need to deliver the passphrase separately and test the complete handoff before sending anything important.
Worth knowing: A harmless test message can confirm the sender and recipient flow before the link is used for real content.
In brief
- Encrypt the message with a passphrase on Encrypt Text.
- Copy the share link and open it yourself to test the recipient's steps.
- Send the link to the recipient.
- Send the passphrase through a different channel.
No account or software installation is required for either side.
What the share link contains
A share link has this general shape:
https://encrypt-online.com/decrypt?method=aes-gcm#share=EOE1...
The part after #share= is a versioned encrypted envelope. It contains the settings and ciphertext needed for the Decrypt page, but not the passphrase or original message.
The URL fragment after # is handled by the browser and is not included in the page request. Encrypt Online reads the encrypted value and then removes the share details from the address bar. The link can still exist in the sender's clipboard, message history, or saved notes, so handle it as an encrypted artifact rather than an ordinary public link.
Create and test the link
- Open Encrypt Text and leave the recommended method selected.
- Paste the message and enter a long, unique passphrase.
- Select Encrypt.
- Select Copy share link when the encrypted result appears.
- Open the copied link in another tab, enter the same passphrase, and select Decrypt.
- Confirm that the recovered message exactly matches the original.
That final test catches a mistyped passphrase or an incomplete handoff while you can still correct it.
What the recipient does
When the recipient opens the link, the Decrypt page says that a shared message was loaded. The encrypted text is already in place.
The recipient only needs to:
- Enter the passphrase you provided separately.
- Select Decrypt.
- Copy the recovered message if needed.
There is no algorithm choice to make for a valid Encrypt Online share link. The versioned envelope carries the required decryption settings.
Send the two parts separately
Send the share link in one channel and the passphrase in another. For example, send the link by email and provide the passphrase in a phone call or a different messaging app.
For especially sensitive messages, choose channels managed through separate accounts and use a fresh passphrase for each message.
When the message is too long for a link
Browsers and messaging systems do not handle unlimited URL lengths consistently, so Encrypt Online limits generated share links to 4,000 characters. If a share link is unavailable after encryption, copy the encrypted result instead. The recipient can paste it into Decrypt Text and use the same passphrase.
For a document or another large payload, use Encrypt File rather than turning the content into an oversized message link.
Capabilities and limits
An Encrypt Online share link does not expire, revoke itself, restrict who can open it, or record who decrypted it. Anyone who obtains both the link and the passphrase can recover the message.
Use a managed sharing system with access controls when you need recipient identity checks, automatic expiry, revocation, or an access record. For a key-based handoff that does not use a shared passphrase, see the OpenPGP Message tool.
Questions people ask
Is the passphrase hidden inside the link?
The link contains the encrypted envelope only. The passphrase must be provided separately.
Is this the same as encrypting a destination URL?
This workflow protects a text message and opens it on the Decrypt page. Encrypt Link is for protecting a destination URL string that the recipient wants to recover.
Can I send the link and passphrase in the same message?
The message will still decrypt, but putting both parts together removes the main benefit of separating them. Use a different channel for the passphrase.