Secure Link on your home screen. Text straight from Share.
Keep Secure Link one tap away. On Android, you can also send selected text from another app straight into the form—then decide when to create the secret link.
No install button? You may already have the app, or your browser may not be offering installation yet. The steps below cover the other places to look.
An icon for you. No extra steps for your recipient.
A PWA is the website you already know, opened in its own window with its own icon. That’s it: no APK to hunt down, no trip to Google Play. Install Secure Link from createsecurelink.com in a supported browser. Whoever receives your one-time link can still open it in their browser, without installing a thing.
Put Secure Link within reach
Start at the official HTTPS address: createsecurelink.com. The browser decides whether to offer installation. Our install link also waits until the local sharing handler is ready, so don’t worry if it isn’t visible immediately.
Android · Chrome
Open the Secure Link home page in Chrome itself—not the small browser window inside Telegram or another messaging app.
Scroll to Tools in the footer. If you see Install App, tap it.
Confirm the browser’s installation dialog. You may also find Install app or Add to Home screen in Chrome’s menu.
Open Secure Link using its new icon and let the home page finish loading.
Desktop · Chrome or Edge
Open the official website in a supported browser.
Click Install App in the footer if it’s available. Otherwise, check for an install icon in the address bar or an installation option in the browser menu.
Confirm, and you’re done. Secure Link will open in a separate window; you can still use the ordinary website whenever you prefer.
On iPhone or iPad, use Safari’s Share menu to add the site to your Home Screen. One catch: this does not add Secure Link to the system Share menu as a destination for text. Incoming Web Share Target isn’t supported in this setup, so you’ll need to paste into the form yourself.
First run? Use a fake password.
Save the real credentials for later. Try this string first:
DemoPassword+123!Put the sample string in your phone’s notes app, select it, and share it to Secure Link.
Check every character—especially + and !. The text should arrive unchanged, and the temporary fragment should be gone from the address bar.
Create a link with a limit of one view. Open it in another browser, reveal the note, and check the decrypted text.
Try opening the same link again. The note should no longer be available. Keep using the dummy string throughout this test.
A few things an app icon doesn’t promise
Installed doesn’t always mean ready to receive shares
Installation and incoming sharing are two separate browser features. An icon on your home screen proves only the first. Receiving text through Share is primarily for an installed PWA on Android with a compatible browser.
You still need a connection
Secure Link is an online app, not an offline vault. Creating and reading notes requires a network connection. The PWA doesn’t cache the app’s HTML, your drafts, decrypted notes, or responses from the note API.
Send text or a URL—not a file
Incoming sharing accepts text and links, not attachments. There’s a 20 KB limit measured in UTF-8 bytes, so the character count varies with the language and emoji. If the text is too large, we won’t quietly cut off the end.
Where does the shared text go?
The icon doesn’t change the cryptography. As on the website, encryption happens in your browser after you choose to create a link. The sharing step comes before that.
- An active Service Worker keeps the share local
- The Service Worker is a local browser handler. When active, it catches the Share menu’s POST request and does not forward the body to our server. It hands the text to the form through a temporary # fragment; browsers don’t include that fragment in HTTP requests.
- No secret query string. No app cache.
- We don’t pass secrets in query parameters such as ?text=. Once captured, the temporary fragment is immediately removed from the address bar. The sharing handler doesn’t send the text to analytics or save it in localStorage, IndexedDB, or a cache.
- Filling the form isn’t creating a note
- You’re still in charge of the next step. Review the imported text and protection settings, then create the encrypted link yourself. Until you do, the text stays in the form’s memory; importing it doesn’t create a note.
There is a limit to this protection. If the local handler is missing or inactive, the POST request may reach the hosting infrastructure. The application does not read its body; instead, it asks you to paste the text manually. Nor can this flow protect you from browser extensions or a compromised device. Installing an app icon doesn’t make an unsafe phone safe.
Stuck? Check these first.
- Where is Install App?
- Open the official HTTPS site in Chrome or Edge itself and let it load. Then check the browser menu as well as the footer. We hide the link when the app is already installed, the browser doesn’t support the installation dialog, or installation isn’t ready yet. The website works without installing anything, too.
- Why isn’t Secure Link in the Share menu?
- Make sure you’ve installed the PWA on Android and opened it once. When sharing text, expand the full list of apps. Still missing? Your browser or the app you’re sharing from may not support this route. On iPhone, paste into the form manually.
- Why am I being asked to paste manually?
- The local handler didn’t intercept the share. Open Secure Link normally, paste the text into the form, and create your link from there. If you try the Share flow again, test it with made-up text—not a real credential.
- What if the text doesn’t appear, or there’s already a draft?
- First check that you shared text, not a file, and that it fits within 20 KB. If the form already holds a draft, choose which text to keep. Oversized content needs your own edit: Secure Link won’t trim a secret and leave you guessing what’s missing.
Before you install
Does my recipient need to install the app?
No. The app is a convenience for the person creating links. Your recipient just opens the one-time link in a browser, as usual.
Can I install Secure Link without Google Play?
Yes—go straight to the official website in a supported browser. There’s no need to find an APK on another site.
Can I send text to Secure Link through Share on iPhone?
Not through this incoming Web Share Target flow. You can add the site to your Home Screen, but you’ll still need to open Secure Link and paste the text into its form.
Does sharing text create a secret link right away?
No. It fills the form, nothing more. Check the text, choose your protection settings, and create the link when you’re ready. If there’s already a different draft, you’ll be asked before it’s replaced.
Are secrets saved so I can use the app offline?
No offline stash. The handler doesn’t cache secrets, and you need a connection to create or retrieve notes. If the local sharing handler is inactive, you’ll be asked to paste manually rather than having the text imported.
Give it a dry run
Open the generator and install Secure Link if your browser offers it. Start with a made-up password; real credentials can wait until you’ve checked the flow.