QuickSecret
Notes, files, voice
Text and — depending on the service — files, photos or a voice recording. Only your explicit create action uploads anything.
Android app
QuickSecret
End-to-end encrypted one-time notes, files and voice messages – from your device, a floating bubble, the share menu, or alongside WhatsApp.
Coming soon on Google Play
No store link yet. The app stays completely free.
- PrivateBin
- Cryptgeon
- Yopass
- No ads
- No tracking
What it does
QuickSecret encrypts content on your device and gives you a link that you share yourself. The default is read-once and the longest expiry the chosen service supports in the app.
Bubble, share, WhatsApp
From a floating bubble, the Android share menu, or alongside a messenger. Optionally, a link can be appended to an existing draft — without sending it automatically.
History with read status
History keeps status and metadata, not note content, link keys or note passwords.
App lock
An optional lock with a PIN or Android’s device lock or biometrics. QuickSecret does not receive fingerprint data.
QR codes
Generated links can be shown as a QR code so they do not have to be typed out.
Genuinely free
No ads, no in-app purchases, no user account, and no analytics or advertising SDK.
How it works
Write or record
You compose the note on your device. Capturing or drafting alone does not send anything.
Encrypt and store
QuickSecret encrypts the content locally and stores the ciphertext with the service you choose: PrivateBin, Cryptgeon or Yopass.
Share the link yourself
You get a link and share it yourself. Anyone with the link and key or password can open the note. Copies kept by a recipient cannot be recalled.
Questions
Is QuickSecret really free?
Yes. The app is completely free: no ads, no in-app purchases, no subscription and no tracking. Voluntary support via PayPal is possible, but never required.
How does the encryption work?
Text, files, photos and voice recordings are encrypted on your device before anything is transmitted. The note key is not sent to the note API. It may be in the URL fragment of the link, or derived from a separately shared password. Providers see connection data such as IP address and User-Agent, plus the ciphertext, not the plaintext. End-to-end encryption does not protect against a compromised app, device or web viewer.
Which services does it use?
The stable app supports PrivateBin, Cryptgeon and Yopass. Preconfigured instances include paste.systemli.org and 0bin.ch, cryptgeon.org, and share.yopass.se / api2.yopass.se. You can approve your own instances. Their terms also apply. The default is read-once and the longest supported expiry. Cryptgeon once-read notes have no time limit until first opening. Cryptgeon v3 is detected and refused; full v3 support is not included yet.
Does the app read my WhatsApp chats?
No. Optional accessibility access, after in-app disclosure and consent, only processes app or window state and an existing message draft in order to show the bubble or append a link. There is no automatic sending and no reading of chat history.
Is there a user account?
No. QuickSecret does not have accounts. You can delete local data in the app (for example the history) or via Android’s app settings or by uninstalling. That does not automatically delete remote notes. Details are in the privacy policy.
What should I keep in mind when sharing?
Anyone who has the link — possibly including a key — or a separately shared password can open the note. Share passwords separately where you can. Providers may see technical metadata. Whether and how long they log it has not been verified live. This website is not a security audit.
QuickSecret stays free of ads, analytics SDKs and billing. Public version 0.4.9 is prepared; a Google Play listing is not available yet.