SecretWolf
For accountancy practices and MSPs

Stop emailing passwords.

Collect ID documents, bank details and logins from clients through a branded request link, send your own as one-time links, and keep an audit trail of what was requested, sent and opened.

One-time links AES-256-GCM Full audit trail Your brand & domain

Collect it, send it, and keep a record

Not another password manager — a branded way to get sensitive details from clients, hand credentials over once, and show how it was handled.

Secret requests

Requests

Ask a client for a login or bank details through a branded, encrypted form — no more "just email it over". From the Team plan.

Full audit trail

Audit

Every request, send, view, verification and expiry — metadata only, never the secret. From the Team plan; CSV export and retention settings on Business.

One-time secrets

Core

Encrypted links that are deleted on first view or expiry, with revocation on every plan and multi-view limits from Team.

Your brand

Branding

Your logo and colours on every request, send and view page, and on the emails your clients receive. From the Team plan.

Recipient verification

Verify

Require an emailed one-time code before a secret reveals, so only the right person can see it. On the Business plan.

API & webhooks

API

Create secrets and requests from your own tools, and get signed webhooks when they're viewed or fulfilled. On the Business plan.

Built-in password generator

Generate

Need a fresh credential to hand over? Generate a strong, random password on the share page and send it as a one-time secret in the same step. On every plan.

From secret to audited in three steps

No installs for your recipient, no plugins — just a link that behaves.

1

Paste & brand it

Generate or drop in a password, API key or file. It's encrypted before it's stored and wrapped in your logo and accent colour.

2

Send the link

Share a one-time link on your own branded address — optionally gated behind an emailed verification code.

3

It self-destructs

The secret is destroyed on first view or expiry. You keep a metadata-only audit trail — export to CSV anytime.

Simple, per-workspace pricing

Start free. Upgrade when you want branding, requests and the audit trail.

See pricing

Building with AI agents?

An agent can create a one-time link and pay for it in the same request over x402 — no signup, no API key.

Pay-per-secret for AI agents
  • UK-hostedApplication and data on UK infrastructure, HTTPS end to end.
  • AES-256-GCMAuthenticated encryption, hard-deleted on view or expiry.
  • A real companyRegistered in England and Wales, company number 14736585.