Slack Integration
Share passwords, API keys, and sensitive information directly in Slack. Your secrets are encrypted and self-destruct after being read once.
/secret to open the Secure Composer
How It Works
Three simple steps to keep your sensitive information secure
Click 'Add to Slack' and authorize Nurbak in your workspace. Only workspace admins can approve the installation.
In any channel or DM, type /secret. A button appears to open the Secure Composer where you write your secret on Nurbak's secure page.
Once created, a secure one-time link is posted in the channel. Recipients click 'Open one-time secret' to view it once.
Features
Each secret generates a unique link that can only be opened once. After viewing, it's gone forever.
Secrets are automatically deleted after being read or after expiration. No traces in Slack history.
Military-grade encryption protects your secrets. The same standard used by governments and Fortune 500.
We can't read your secrets even if we wanted to. The decryption key never touches our servers.
Comparison
See why Nurbak is the best choice for sharing secrets in Slack
| Feature | Nurbak | Hush | Plain Slack |
|---|---|---|---|
| Zero-Knowledge Encryption | ✓ | ~ | ✗ |
| Self-Destructing Links | ✓ | ✓ | ✗ |
| Custom Expiration | ✓ 7 days | 10 min | ✗ |
| Password Protection | ✓ | ✗ | ✗ |
| Unlimited Secrets | ✓ Free | 5/month | N/A |
| Price | $0 | $29.99/mo | N/A |
Use Cases
Share AWS credentials, Stripe keys, or any API tokens without leaving traces in chat history.
/secret → Secure ComposerSend login credentials to team members securely. No more passwords sitting in Slack forever.
/secret → Secure ComposerShare credit card details or banking information safely when needed.
/secret → Secure ComposerDistribute software licenses to your team without exposure in shared channels.
/secret → Secure ComposerFAQ
Yes! Nurbak for Slack is completely free while we're in beta. Share unlimited one-time secrets without any cost during this period. We believe security should be accessible to everyone.
You can set expiration from 1 hour up to 7 days. Once viewed or expired, secrets are permanently deleted from our servers.
Yes! You can use /secret in any channel, group DM, or direct message. The encrypted link will be visible to everyone in that conversation, but only the first person to open it can view the secret.
Yes. Nurbak uses true zero-knowledge encryption where the decryption key never leaves your browser. Other apps like Hush encrypt on their servers, meaning they can technically read your secrets.
No. Once a secret is viewed, it's permanently deleted. This is a security feature, not a bug. The guarantee of destruction is what makes one-time secrets trustworthy.
We only store encrypted data that we cannot decrypt. The decryption key is part of the link (after the #) which browsers never send to servers. We physically cannot read your secrets.
Sharing sensitive information in Slack is risky. Passwords, API keys, and credentials sit in chat history indefinitely, accessible to anyone with channel access. Slack's built-in encryption protects data in transit, but once a message is sent, it lives forever in logs, backups, and search results.
Nurbak solves this with one-time secrets for Slack. When you use /secret, you're taken to a secure composer where your data is encrypted in your browser before it ever reaches our servers. We generate a unique link that can only be opened once. After viewing, the secret is permanently destroyed.
Unlike alternatives like Hush that encrypt on their servers, Nurbak uses zero-knowledge architecture. This means we physically cannot read your secrets - the decryption key never touches our infrastructure. Plus, Nurbak is completely free with unlimited secrets, while competitors charge $29.99/month for similar features.