SecretWolf
For agencies

Hand over client credentials without emailing passwords

Your agency shares logins, API keys and access all day. SecretWolf sends them as branded, one-time links — encrypted, audited, and gone the moment they're read.

One-time links AES-256-GCM Full audit trail Your brand & domain

Why agencies choose SecretWolf

Your client sees your agency, not a tool they've never heard of — and you can show exactly when each credential changed hands.

On your brand, on your domain

Every secure link, request form and view page carries your logo and colours — on your own subdomain or a custom domain — not a generic tool your client has never heard of.

Proof you handed it over

A full audit trail records who received each credential and when it was viewed, so client onboarding and offboarding are documented, not guessed at.

Request credentials back, safely

Send a branded, encrypted form to ask a client for their CMS, hosting or ad-account login — instead of “just email it over”.

One-time by default

Links self-destruct on first view or expiry. Nothing lingers in an inbox, a Slack channel or a shared doc.

Generate strong passwords inline

Create a fresh, random password on the share page and send it in the same step — no reused client passwords.

Your whole team, one workspace

Add your account managers and developers; every send and request is logged under your agency, not scattered across personal inboxes.

Questions we hear

How is this different from a password manager?

A password manager stores credentials for your team long-term. SecretWolf is for the handover — passing a secret to a client or contractor once, under your brand, with a record that it happened. The link is destroyed after a single view.

Can clients receive a secret without an account?

Yes. Recipients just open the link — no signup, no install. You can optionally require them to confirm a one-time code sent to their email before the secret reveals.

Can we use our own domain?

On the Business plan you can serve secure links from your own custom domain with automatic HTTPS, so clients only ever see your brand.

Is there an audit trail for client work?

Every send, view, request, verification and expiry is logged as metadata (never the secret itself). Export it to CSV for your records or a client's security review.

Hand over your next client login under your own brand

Free to start. Add your logo, your domain and the audit trail when you're ready.

Start free