[{"data":1,"prerenderedAt":35},["ShallowReactive",2],{"post-data-onetime-share-zero-knowledge-secret-sharing":3},{"post":4,"relatedPosts":19},{"id":5,"title":6,"content":7,"hashtags":8,"coverImage":15,"createdAt":16,"seoTitle":17,"seoDescription":18},"o5QN2bwHu6qtrHNCsk4j","Onetime Share (Zero-Knowledge Secret Sharing)","\u003Cp data-path-to-node=\"1\">We all know the drill. A new developer joins the team, or an external contractor needs temporary access to a staging environment, and someone pastes an API key directly into Slack, Jira, or an email.\u003C\u002Fp>\n\u003Cp data-path-to-node=\"2\">That credential now lives forever in your chat logs and email servers, creating a massive, unmanageable attack surface.\u003C\u002Fp>\n\u003Cp data-path-to-node=\"3\">To kill this habit, we built \u003Cstrong data-path-to-node=\"3\" data-index-in-node=\"29\">Onetime Share - \u003C\u002Fstrong>a Zero-Knowledge, self-destructing secret sharing tool built natively into the Ennote CLI and Web Dashboard.\u003C\u002Fp>\n\u003Ch3 data-path-to-node=\"5\">Built for fast onboarding and external handoffs\u003C\u002Fh3>\n\u003Cp data-path-to-node=\"6\">We designed Onetime Share to fix the friction of moving credentials across untrusted channels.\u003C\u002Fp>\n\u003Cul data-path-to-node=\"7\">\n\u003Cli>\n\u003Cp data-path-to-node=\"7,0,0\">\u003Cstrong data-path-to-node=\"7,0,0\" data-index-in-node=\"0\">Employee Onboarding:\u003C\u002Fstrong> Give new hires their initial database credentials or VPN keys before their permanent SSO is fully provisioned. The payload self-destructs the moment it’s read. If an unauthorized user intercepts and clicks the link first, the intended recipient will get an error - instantly alerting you to a compromised channel.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp data-path-to-node=\"7,1,0\">\u003Cstrong data-path-to-node=\"7,1,0\" data-index-in-node=\"0\">Contractor & Vendor Access:\u003C\u002Fstrong> Need to send a temporary \u003Ccode data-path-to-node=\"7,1,0\" data-index-in-node=\"53\">.env\u003C\u002Fcode> file or service account token to an external agency? Set a strict expiration (TTL) and require a password. Send the link via email and the password via Slack, giving you easy, out-of-the-box multi-channel verification.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 data-path-to-node=\"9\">True zero-knowledge architecture\u003C\u002Fh3>\n\u003Cp data-path-to-node=\"10\">When you create a Onetime Share, the data is cryptographically locked on your machine before it's sent to our servers.\u003C\u002Fp>\n\u003Cp data-path-to-node=\"11\">Here is how it works: the decryption key is embedded directly into the URL's fragment (the \u003Ccode data-path-to-node=\"11\" data-index-in-node=\"91\">#key_salt\u003C\u002Fcode> portion). Because modern browsers and HTTP clients \u003Cstrong data-path-to-node=\"11\" data-index-in-node=\"152\">never transmit URL fragments to the server\u003C\u002Fstrong>, Ennote acts strictly as a blind storage provider. We store the encrypted cipher, but we mathematically cannot read your payload. Decryption happens entirely in the recipient's local memory.\u003C\u002Fp>\n\u003Ch3 data-path-to-node=\"13\">The CLI workflow\u003C\u002Fh3>\n\u003Cp data-path-to-node=\"14\">You can create and consume secure shares directly from your terminal. We fully support Unix piping so your plaintext secrets never touch your shell history.\u003C\u002Fp>\n\u003Cp data-path-to-node=\"15\">\u003Cstrong data-path-to-node=\"15\" data-index-in-node=\"0\">Create a Share\u003C\u002Fstrong> Share a quick string, or pipe an entire configuration file with a custom expiration time and password:\u003C\u002Fp>\n\u003Cp>\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C\u002Fp>\n\u003Cdiv class=\"code-block ng-tns-c4005593173-91 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\">\u003C!---->\n\u003Cdiv class=\"formatted-code-block-internal-container ng-tns-c4005593173-91\">\n\u003Cdiv class=\"animated-opacity ng-tns-c4005593173-91\">\u003C!---->\n\u003Cpre class=\"ng-tns-c4005593173-91\">\u003Ccode class=\"code-container formatted ng-tns-c4005593173-91\" role=\"text\" data-test-id=\"code-content\">\u003Cspan class=\"hljs-comment\"># Quickly share a secret string\u003C\u002Fspan>\nennote share create \u003Cspan class=\"hljs-string\">\"my-super-secret\"\u003C\u002Fspan>\n\n\u003Cspan class=\"hljs-comment\"># Pipe a file, set a 7-day expiration, and require a password\u003C\u002Fspan>\ncat config.json | ennote share create --ttl 7d --password \u003Cspan class=\"hljs-string\">\"1234\"\u003C\u002Fspan>\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C!---->\u003C\u002Fdiv>\n\u003C\u002Fdiv>\n\u003C\u002Fdiv>\n\u003Cp>\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C\u002Fp>\n\u003Cp data-path-to-node=\"17\">\u003Cstrong data-path-to-node=\"17\" data-index-in-node=\"0\">Read and Inject\u003C\u002Fstrong> Recipients can read the decrypted payload in their terminal, or extract specific keys and inject them directly into a local process to maintain a zero-persistence workflow:\u003C\u002Fp>\n\u003Cp>\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C\u002Fp>\n\u003Cdiv class=\"code-block ng-tns-c4005593173-92 ng-animate-disabled ng-trigger ng-trigger-codeBlockRevealAnimation\">\u003C!---->\n\u003Cdiv class=\"formatted-code-block-internal-container ng-tns-c4005593173-92\">\n\u003Cdiv class=\"animated-opacity ng-tns-c4005593173-92\">\u003C!---->\n\u003Cpre class=\"ng-tns-c4005593173-92\">\u003Ccode class=\"code-container formatted ng-tns-c4005593173-92\" role=\"text\" data-test-id=\"code-content\">\u003Cspan class=\"hljs-comment\"># Read the full shared payload\u003C\u002Fspan>\nennote share get \u003Cspan class=\"hljs-string\">\"https:\u002F\u002Fapp.ennote.io\u002Fonetime\u002F1234#key_salt\"\u003C\u002Fspan>\n\n\u003Cspan class=\"hljs-comment\"># Extract a specific key and inject it straight into a deployment script\u003C\u002Fspan>\nennote share get \u003Cspan class=\"hljs-string\">\"https:\u002F\u002Fapp.ennote.io\u002Fonetime\u002F1234#key_salt\"\u003C\u002Fspan> -k \u003Cspan class=\"hljs-string\">\"api_key\"\u003C\u002Fspan> -- .\u002Fdeploy.sh\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003C!---->\u003C\u002Fdiv>\n\u003C\u002Fdiv>\n\u003C\u002Fdiv>\n\u003Cp>\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C!---->\u003C\u002Fp>\n\u003Ch3 data-path-to-node=\"20\">Available in the web UI\u003C\u002Fh3>\n\u003Cp data-path-to-node=\"21\">Not everyone lives in the terminal. Product Managers, HR, and Support teams can use the Ennote Cloud to generate shares. Just paste your credential, set your expiration policy, and generate a secure link in seconds.\u003C\u002Fp>\n\u003Ch3 data-path-to-node=\"22\">Try it today\u003C\u002Fh3>\n\u003Cp data-path-to-node=\"23\">Onetime Share is live now. Upgrade your Ennote CLI via Homebrew (or your package manager of choice) to get started, or log into the web app.\u003C\u002Fp>\n\u003Cp data-path-to-node=\"24\">For a complete breakdown of the technical details and command flags, check out the official \u003Ca href=\"https:\u002F\u002Fdocs.ennote.io\u002Fcli\u002Fcommands\u002Fshare\">\u003Ccode data-path-to-node=\"24\" data-index-in-node=\"92\">ennote share\u003C\u002Fcode>\u003C\u002Fa> documentation.\u003C\u002Fp>",[9,10,11,12,13,14],"EnnoteCLI","ZeroKnowledge","SecretSharing","DevSecOps","CyberSecurity","Onetime","https:\u002F\u002Ffirebasestorage.googleapis.com\u002Fv0\u002Fb\u002Fblog-01-c712e.firebasestorage.app\u002Fo\u002Fblog-covers%2F1782105985823_og-share.png?alt=media&token=480d427e-952a-4982-8840-bbdb75e62198",1782105987231,"Ennote Onetime Share: Zero-Knowledge Secrets","Stop sharing credentials in Slack. Ennote Onetime Share lets you generate zero-knowledge, self-destructing secret links via CLI and Web. End-to-end encrypted.",[20,25,30],{"title":21,"slug":22,"coverImage":23,"createdAt":24},"The Evolution of Kubernetes Secret Delivery (And Why Polling is Dead)","the-evolution-of-kubernetes-secret-delivery-and-why-polling-is-dead","https:\u002F\u002Ffirebasestorage.googleapis.com\u002Fv0\u002Fb\u002Fblog-01-c712e.firebasestorage.app\u002Fo\u002Fblog-covers%2F1777523487463_diagramm%20(2).jpg?alt=media&token=5b01f974-cfe5-4890-b68f-5e178b422c6e",1777523490608,{"title":26,"slug":27,"coverImage":28,"createdAt":29},"The Identity-Driven Cryptography Behind Ennote's Zero-Persistence Vault","the-identity-driven-cryptography-behind-ennote-s-zero-persistence-vault","https:\u002F\u002Ffirebasestorage.googleapis.com\u002Fv0\u002Fb\u002Fblog-01-c712e.firebasestorage.app\u002Fo\u002Fblog-covers%2F1778396426354_og-image.png?alt=media&token=4bd31d6a-d525-443b-8879-5178a80b5335",1778396428194,{"title":31,"slug":32,"coverImage":33,"createdAt":34},"Announcing the Ennote Certified Partner Network: Eliminate the Overhead of Legacy Infrastructure","certified-partner-network-launch","https:\u002F\u002Ffirebasestorage.googleapis.com\u002Fv0\u002Fb\u002Fblog-01-c712e.firebasestorage.app\u002Fo\u002Fblog-covers%2F1780035988445_wmremove-transformed%20(5)%20(2).png?alt=media&token=fdd2726b-b636-4356-b22d-a40eaf67949d",1780035990138,1782106646608]