Is Message Shuttle free?

Completely free — no signup, no ads, no in-app purchases. Maintained independently by ShuttleLab.

How does burn-after-reading work? Is the pickup code one-time?

Yes. When the recipient enters the code, the server calls getAndDelete — read and immediate delete in one operation. A second attempt returns 404. Additionally, every message expires after 24 hours (86,400 seconds) by default.

Is the message encrypted? End-to-end or server-side only?

Messages are encrypted at rest by Cloudflare KV infrastructure, but this is NOT end-to-end encryption. The server can technically read message content. We do not log message content, and messages are deleted on read or after 24 hours.

What is the maximum message length?

There is no application-level character limit. The practical ceiling is Cloudflare KV's 25 MB per-value maximum. Submissions exceeding that will be rejected by KV.

How long is the pickup code? Can it be guessed?

The pickup code is 4 uppercase hex characters (0–9, A–F), giving 65,536 possible combinations. Generated from the first 4 characters of crypto.randomUUID(). The probability of a single random guess is about 0.0015%.

How long does a message last if the recipient doesn't pick it up?

24 hours by default. After that, Cloudflare KV automatically deletes the message — no manual cleanup needed.

Can I recall a message that hasn't been picked up yet?

The API supports DELETE /api/messages/{id} — you can delete an unread message by its pickup code. The current version does not expose a recall button in the UI.

How is Message Shuttle different from PrivNote or OneTimeSecret?

PrivNote and OneTimeSecret are established one-time message tools; some features require payment. Message Shuttle is entirely free, needs no signup, supports Chinese/English, and runs on Cloudflare's global edge network for lower latency. None of the three offer end-to-end encryption.

Does the server store message logs?

No. The code only calls console.error on errors — message content is never logged. Messages are stored as raw text in KV, deleted on read, and auto-expired.

Is it suitable for sharing passwords or credentials?

Yes for one-time sharing. The password won't sit in chat history, auto-expires in 24 hours, and is destroyed on pickup. Caveat: this is not end-to-end encrypted — the server can technically read content. For high-security needs, combine with tools like GPG.

About Message Shuttle

Secure, private, and convenient messaging

Our Service

Message Shuttle is a simple yet powerful platform. Enter your content and get a unique 4-character pickup code. Share the code so others can retrieve your message.

No registration or login required—send messages anytime, anywhere.

Fast & Easy

No sign-up needed. A clean interface keeps message passing effortless.

Secure & Reliable

Leading encryption practices keep messages safe during transit and storage.

Privacy First

Messages are destroyed after pickup. No personal data is collected—true burn after reading.

Time-limited Storage

Messages default to 24 hours and auto-delete afterward.

Use Cases

✓Temporarily share passwords or verification codes
✓Send text across devices
✓Send private notes to friends
✓Scenarios where you prefer no chat history

Meeting you for the first time feels like the return of an old friend

Message Shuttle is free and maintained by the owner. If it helps you, consider share with friends:

For questions or feedback, contact the owner

Email：[email protected]

Who is Message Shuttle for?

Engineers who need to send passwords, tokens, or credentials to colleagues without leaving them in chat history
Casual users who want to share private text (addresses, phone numbers) that self-destructs after reading
Legal or compliance staff transferring one-time sensitive fields across organizations
Teachers sending one-time answer codes or links to students

When should I use Message Shuttle?

A colleague forgot the Wi-Fi password and you don't want it sitting in the group chat
Temporarily share an API key with a co-developer — gone after they read it
Send a client a one-time code (e.g. OTP) they only need to see once
Share an address or phone number with a friend without cloud chat history
Send bank account details to a family member — one-time pickup, then auto-deleted

How to send a message

Open the Message Shuttle homepage and click 'Start Sending'
Type your message into the text box
Click 'Send Message' — the system generates a 4-character pickup code
Copy the code or use the share button to send it to the recipient

How to receive a message

Open the Message Shuttle homepage and click 'Start Receiving'
Enter the 4-character pickup code
Click 'Confirm' — the message content is copied to your clipboard automatically

How burn-after-reading works

When sending, the default 24-hour TTL (86,400 s) is applied automatically
When the recipient clicks 'Confirm', the message is deleted from the server immediately
The same code cannot be reused — a second attempt returns 'Pickup code not found'

Message Shuttle vs alternatives

Tool	No Account	Burn After Read	Custom TTL	Cross-Platform	Free	End-to-End Encrypted
Message Shuttle	✓	✓	✓ (24h default)	✓ (Web)	✓	—
PrivNote	✓	✓	✓	✓ (Web)	Partial	—
OneTimeSecret	✓	✓	✓	✓ (Web)	Partial	—
Signal Disappearing	— (signup)	✓	✓	✓ (App)	✓	✓
WeChat Recall	— (signup)	Unreliable	—	✓ (App)	✓	—

Frequently Asked Questions

Is Message Shuttle free?: Completely free — no signup, no ads, no in-app purchases. Maintained independently by ShuttleLab.
How does burn-after-reading work? Is the pickup code one-time?: Yes. When the recipient enters the code, the server calls getAndDelete — read and immediate delete in one operation. A second attempt returns 404. Additionally, every message expires after 24 hours (86,400 seconds) by default.
Is the message encrypted? End-to-end or server-side only?: Messages are encrypted at rest by Cloudflare KV infrastructure, but this is NOT end-to-end encryption. The server can technically read message content. We do not log message content, and messages are deleted on read or after 24 hours.
What is the maximum message length?: There is no application-level character limit. The practical ceiling is Cloudflare KV's 25 MB per-value maximum. Submissions exceeding that will be rejected by KV.
How long is the pickup code? Can it be guessed?: The pickup code is 4 uppercase hex characters (0–9, A–F), giving 65,536 possible combinations. Generated from the first 4 characters of crypto.randomUUID(). The probability of a single random guess is about 0.0015%.
How long does a message last if the recipient doesn't pick it up?: 24 hours by default. After that, Cloudflare KV automatically deletes the message — no manual cleanup needed.
Can I recall a message that hasn't been picked up yet?: The API supports DELETE /api/messages/{id} — you can delete an unread message by its pickup code. The current version does not expose a recall button in the UI.
How is Message Shuttle different from PrivNote or OneTimeSecret?: PrivNote and OneTimeSecret are established one-time message tools; some features require payment. Message Shuttle is entirely free, needs no signup, supports Chinese/English, and runs on Cloudflare's global edge network for lower latency. None of the three offer end-to-end encryption.
Does the server store message logs?: No. The code only calls console.error on errors — message content is never logged. Messages are stored as raw text in KV, deleted on read, and auto-expired.
Is it suitable for sharing passwords or credentials?: Yes for one-time sharing. The password won't sit in chat history, auto-expires in 24 hours, and is destroyed on pickup. Caveat: this is not end-to-end encrypted — the server can technically read content. For high-security needs, combine with tools like GPG.