See the complete route index at https://docs.crusible.dev/llms.txt before following links.

# Share a secret

Send a password, token or key as a sealed card that only the people you choose can reveal, and see who revealed it.

<!-- https://docs.crusible.dev/guides/share-a-secret/ · doctype: how-to · role: member · reviewed: pending human review -->


A secret travels as a sealed card in a message. The card shows its label to everyone in the conversation.
Only the readers you choose can reveal the value. Text in a normal message stays readable to everyone
who can see the message and in search.

![A sealed secret card with its label, sender and expiry, the value masked, and Reveal and Copy controls.](/docs-illustrations/share-a-secret-paper.svg)



1. <p>Paste the credential into the composer. When the text looks like a key, token or password,
the composer shows a notice such as “This looks like an npm token.”
Select <strong>Share as /secret</strong> to move the value into a secret tile.
To start a tile yourself, select <strong>Add a secret</strong> in the composer toolbar or type <code>/secret</code>.</p>
 (Result: The composer shows a **Secret** tile with the value masked.)

1. <p>Enter a label that says what the secret is for. Everyone in the channel sees the label.
Choose <strong>Expires</strong>: 1 hour, 24 hours, 7 days or 30 days. A new tile starts at 7 days.
Press the flame (<strong>View once</strong>) to let each reader reveal the value one time.</p>
 (Result: The tile shows the label, the expiry and the **View once** setting you chose.)

1. <p>Select the audience button on the tile. In <strong>Share this secret</strong>, choose <strong>Specific people</strong>,
the channel, <strong>A group</strong> or <strong>Everyone at your organization</strong>. Pick up to 50 people.
An agent can reveal a secret only when you name it. Select <strong>Done</strong> to apply the choice.</p>
 (Result: The tile names who can reveal the secret, for example **3 people can reveal this**.)

1. <p>Send the message. A reader selects <strong>Reveal</strong> to see the value for 60 seconds, or <strong>Copy</strong>
to copy it. Crusible clears the clipboard 30 seconds after a copy.</p>
 (Result: The message shows a sealed card with the label, **From** your name and the expiry.)

1. <p>Select <strong>Secret details</strong> on the card to open the audit pane. The pane shows who shared the secret,
when it expires, its audience and who revealed it.</p>
 (Result: The **Access log** lists each open, reveal, copy and refusal, newest first.)

1. <p>To end access early, open the message menu and choose <strong>Revoke secret</strong>. Confirm with <strong>Revoke</strong>.</p>
 (Result: The card shows **Revoked** and nobody can reveal the value.)

- **If this doesn't work:** <p>To send the text as a normal message, select <strong>Keep as text</strong> on the notice. If you send a message
that still looks like a secret, <strong>Send this as text?</strong> asks first. Choose <strong>Send as secret</strong> or <strong>Send as text</strong>.
A message holds at most 4 secrets. Remove one when you see <strong>Secret limit reached</strong>.
After a page reload the tile shows “Secret not saved. Enter it again”. Enter the value again before you send.
If a reader sees “Too many reveals. Try again in a minute”, they wait one minute.</p>





The card stays in the conversation after it expires or you revoke it. The access log stays with it.

## Who sees what

- **Readers you chose** see **Reveal** and **Copy**. Anyone outside the audience sees the size of the audience and no controls.
- **Agents** join an audience only when you name them. When you name an agent, the tile warns
  “Agent models receive this secret. It cannot be recalled.”
  An agent reveals the value only when the person it acts for is also in the audience.
- **Guests** join when you name them under **Specific people**. **A group** and **Everyone at your organization** leave guests out.
- **The access log** shows every entry to the person who shared the secret and to channel managers.
  Everyone else sees only their own entries.

You and channel managers can revoke the secret. Deleting the message also revokes its secrets.
Revoking stops new reveals. A value someone has already revealed stays with them, so rotate an exposed credential.

- [Work with messages](https://docs.crusible.dev/guides/work-with-messages/) — Reply, edit, attach files, annotate images and forward a message without losing its context.- [Composer](https://docs.crusible.dev/reference/composer/) — Message text, mentions, references, uploaded files and sending controls.- [Conversation controls](https://docs.crusible.dev/reference/conversation/) — Messages, threads, reactions, forwarding, presence, link previews and image annotation in a channel.