SoftSol

Aegis — Secret Sharing

Free for all SoftSol clients & partners

Single-use encrypted links · Self-destructing · No content logging

Aegis is SoftSol’s free encrypted secret-sharing service. Instead of sending a password over WhatsApp, email, or chat — where it lives permanently in message histories and server logs — Aegis creates a single-use encrypted link that automatically destroys itself the moment it is opened. Nothing is left behind.

The problem with sending passwords the usual way

Sending credentials via chat or email is one of the most common security mistakes in business — and one of the most dangerous. Every message leaves a permanent, readable trail that outlasts the original need.

WhatsApp & Chat

Messages are stored indefinitely on both devices, in cloud backups, and on provider servers. One compromised phone exposes every password ever shared.

Email

Email travels through multiple servers in plaintext. It lives in sent folders, inboxes, archives, and server logs — fully readable by administrators and attackers — often for years.

SMS

Stored by carriers, often unencrypted, and accessible to anyone who picks up the device. Vulnerable to SIM-swap attacks and interception.

Shared Documents

Passwords in shared spreadsheets or notes create permanent, searchable records — often synced to multiple cloud accounts well outside your control.

Under POPIA and ISO 27001, organisations are required to protect personal and confidential information through appropriate technical controls. Sending credentials in plaintext over uncontrolled channels constitutes a failure of information security controls and may constitute a reportable data breach. Credential exposure via chat and email is one of the leading vectors in real-world security incidents affecting South African businesses today.

How Aegis works

Aegis replaces the permanent message with a disappearing one. The process is simple — the security is built in.

1

Paste your secret and set expiry

You paste the password or sensitive information into Aegis and choose your expiry settings — by time (e.g. 1 day, 7 days) and by view count (e.g. 1 view). The secret is encrypted with AES-256 before it is stored. The plaintext is never written to logs, databases in readable form, or application records.

2

Share the link — not the secret

Aegis generates a unique, one-time link. You send that link via WhatsApp, email, or any other channel. The link contains no password — it is simply a reference to an encrypted blob on SoftSol’s server. Even if the link ends up in a chat history or email archive, it will already be dead and irretrievable by the time anyone finds it.

3

Recipient opens the link — secret is revealed once

The recipient clicks the link and sees the secret. Optionally, you can require a passphrase known only to the recipient as a second factor — communicated separately — so the link alone is useless even if intercepted.

4

The secret is permanently and irreversibly deleted

The moment the view count or time limit is reached, the encrypted record is destroyed. There is no backup, no archive, and no recovery path. The secret is gone — from Aegis, from logs, from everywhere on SoftSol’s infrastructure.

What’s included

AES-256 Encryption at Rest

Every secret is encrypted before storage. Even direct database access returns only ciphertext — unreadable without the unique decryption key tied to each link.

Auto-Expiry by Time & Views

Set secrets to expire after a time window, a number of views, or both — whichever comes first. Once expired, deletion is permanent and unrecoverable.

No Content Logging

The secret payload is never written to application logs, access logs, or error reports. What you push, only the intended recipient can ever see.

Passphrase Protection

Add an optional passphrase as a second factor. Even if the link is intercepted or forwarded, the secret is inaccessible without the passphrase — communicated via a separate channel.

1-Click Retrieval Step

An optional confirmation step prevents automated URL scanners and chat link-preview systems from consuming a view before the recipient even sees the secret.

Hosted on SoftSol Infrastructure

Aegis runs on SoftSol’s own private servers. Your secrets never leave our controlled environment and are never processed by third-party cloud services.

Use it now — it’s free

Aegis at aegis.softsol.co.za

Aegis is available immediately to all SoftSol clients and partners at no charge. No account required, no installation, no configuration. Open the link, paste your secret, share the one-time link.

  • No account or login required to send a secret
  • Works from any browser on any device — desktop, tablet, or mobile
  • Includes a built-in password generator for creating strong credentials on the spot
  • No subscription, no usage limits, no cost — part of SoftSol’s service offering
Open Aegis