-
Notifications
You must be signed in to change notification settings - Fork 1
URL Parameters
José Carrillo edited this page Jun 13, 2026
·
2 revisions
Both the encrypt and decrypt forms read query parameters from the URL on mount, so you can pre-fill fields or fully automate a flow with a link. Each parameter has a long and a short alias. Sensitive parameters are automatically removed from the URL via history.replaceState right after they are read.
| Value | Effect |
|---|---|
encrypt |
Switch to the Encrypt tab |
decrypt |
Switch to the Decrypt tab |
| Long | Short | Type | Values | Sensitive |
|---|---|---|---|---|
passphrase |
p |
string | min 6 chars | Yes |
passphrase2 |
p2 |
string | min 6 chars (enables dual key) | Yes |
dual |
d |
flag |
1 / true
|
No |
reveal |
r |
string | min 6 chars | Yes |
mode |
m |
enum |
text / file
|
No |
ttl |
— | number |
0, 30, 60, 1440, 10080, 20160 (minutes) |
No |
security |
s |
enum |
standard / high / maximum (overrides iterations) |
No |
iterations |
i |
number |
300000–1000000
|
No |
compression |
c |
enum |
none / gzip / deflate
|
No |
hint |
h |
string | any | No |
note |
n |
string | any | No |
question |
q |
string | any | No |
answer |
a |
string | any | Yes |
attempts |
att |
number |
0, 3, 5, 10
|
No |
ips |
— | string | comma-separated IPv4/IPv6 | No |
| Long | Short | Type | Sensitive |
|---|---|---|---|
passphrase |
p |
string | Yes |
passphrase2 |
p2 |
string (enables dual key) | Yes |
dual |
d |
flag | No |
answer |
a |
string | Yes |
# Pre-fill the decrypt passphrase (cleared from the URL after load)
/?t=decrypt&p=myKey123
# Open the encrypt tab in file mode, 30-minute expiry, gzip, high KDF
/?t=encrypt&m=file&ttl=30&c=gzip&s=high
# Encrypt with a reveal key, a hint, a secret question, and an IP allowlist
/?t=encrypt&p=main&r=shared&h=check+email&q=Color?&a=blue&ips=10.0.0.1,192.168.1.5
# Decrypt a dual-key file with the secret answer
/?t=decrypt&p=key1&p2=key2&a=answer
-
Sensitive values are not retained.
p,p2,r, andaare cleared from the address bar immediately after being read, to avoid leaving secrets in history or referrers. Even so, treat any link containing them as sensitive. -
security(s) overridesiterations(i) when both are present. - For non-interactive or scripted use, prefer the CLI or the Library over URL parameters.
📖 Glossary — terms on this page: dual passphrase · reveal key · secret question · TTL / expiration · PBKDF2 · compression. Full list in the Glossary.
📖 New to a term? See the Glossary. · Zefer · Repository · CLI · MIT © José Carrillo
Guides
- Getting Started
- How It Works
- Examples and Recipes
- Install and Self-Hosting
- Comparisons
- Troubleshooting
- FAQ
Security
Channels
Tools
Project
Reference