Every feature, and how it works

All plans

Squawks: one-time secure links

Send a password, note, or file as a link that works a set number of times and then destroys itself.

How it works

1. Choose what you’re sending: a message, or a Login, Wi-Fi, Server, or Custom fields card that the recipient sees with masked values and Copy buttons. A strong password generator is built in, and you can attach files.
2. Choose how many times it can be opened (up to 100) and when it expires (up to 30 days). Optionally add a passphrase, lock it to specific email addresses or networks, and ask to be told when it’s opened.
3. Your browser encrypts it and gives you the link. Copy it, or have us email it for you.
4. The recipient opens the link, with no account needed. When the views run out or it expires, the encrypted data is erased.

Good to know

• Up to 10 files and 25 MB per squawk.
• Screenshot and copy deterrents with a viewer watermark, for extra-sensitive items.
• Every open and failed attempt is in the audit trail, with time, IP address, and outcome.

All plans

Requests

Collect passwords and files from clients, with a link they reply to.

How it works

1. Write what you need, such as “Please send the router admin password and last month’s statement.”
2. Choose one client (open up to 30 days) or a reusable link many people can use (up to a year and 1,000 responses), then copy the link or have us email it.
3. Your client opens the link, with no account needed, and replies with a message and files. Their browser encrypts everything before it’s sent.
4. You open responses in your browser and can download each one as a PDF.

Good to know

• Your browser makes a key pair for each request. The private key stays with you and a private link you save, so we can’t read responses.

Business

Intake forms

Turn a request into a complete form, so clients give you everything you need the first time.

How it works

1. Start from a template (banking details, W-9 information, IT inventory, new client onboarding, and more) or build your own.
2. Add fields: text, secret, multi-line, dropdown, date, number, yes/no, file, and section headings, with format checks for routing and account numbers, EINs, SSNs, email addresses, ZIP codes, and phone numbers.
3. Add a typed signature where you need one; the client agrees to your statement and types their name.
4. Clients fill it in on any device, their answers are encrypted before sending, and you get a clean response you can download as a PDF.

Good to know

• Typed signatures come with a record of who signed, when, and what they agreed to.
• The same fields work on your Squawk Drop page.

Business

Fillable PDF forms

Have clients fill in the real PDF, and get back the completed, signed form.

How it works

1. On a new request, choose Fillable PDF: a ready-made Form W-9, W-4, or I-9 (employee section), or upload your own fillable PDF (up to 5 MB).
2. Your client sees the actual form in their browser and types into its boxes. Required items and formats like SSNs are checked before sending.
3. They agree to the form’s own certification and type their name to sign.
4. Their browser fills in the PDF, locks the fields, adds a signature record page, and encrypts it. You download the completed form.

Good to know

• Only the right parts are fillable: for example, an I-9’s employer section stays blank for you.
• Filling in happens on a computer or a phone; phones zoom to type.

Business

Squawk Drop: a secure page for your team

One page, with your name in the address, where clients can send you information and files at any time.

How it works

1. Choose your page’s address, title, and message, optional topics (like Billing or Tax documents), and how long items are kept (1 day to a year).
2. Choose who can send: anyone with the link, or only approved senders (specific addresses or whole domains), who confirm their email with a code.
3. Clients open the page, pick a topic, and send text, form answers, and files. Everything is encrypted in their browser, including file names.
4. Your team gets a notice and opens items in the Squawk Drop inbox, marks them done, downloads files, or deletes them.

Good to know

• Up to 2 GB and 20 files per submission, uploaded straight to encrypted storage.
• The Squawk Drop’s private key stays in your team’s browsers and a recovery link you save.
• Notices go out at most once every 10 minutes, so a busy day doesn’t flood your inbox.

Business

Secure chats

A short-lived, end-to-end encrypted conversation with clients that erases itself.

How it works

1. Name the chat, invite up to 10 people by email, choose when it erases (1 hour, 8 hours, 24 hours, or 7 days), and optionally add a passphrase and teammates as co-hosts.
2. Guests open their invitation on any device, with no account or app, and confirm a code sent to their email.
3. A browser already in the chat hands them the chat’s key, sealed for their device alone, and they’re in.
4. Send messages, masked credentials, and files. Close the chat, or let its timer run out, and it’s erased for everyone.

Good to know

• Files up to 100 MB each.
• Someone who already has the chat open lets new people in; with a co-host, it doesn’t depend on one person.
• The chat’s activity log records who joined and when, never what was said.

Business

Windows desktop notifications

A small system tray app that tells you the moment something arrives.

How it works

1. Download the app from your Profile page and run it.
2. On your Profile, click Connect a Windows computer and paste the one-time code into the app.
3. The app checks for news every minute and shows a notification: a new Squawk Drop item, a squawk sent to you, a response to your request, a squawk being opened, or a chat message.

Good to know

• Notifications show who and when, never the secret itself.
• Disconnect a computer anytime from your Profile.

All plans

Your notification settings

Choose which notices you get by email and, on Business, in the Windows app.

How it works

1. Click your name at the bottom of the sidebar to open your Profile.
2. For each kind of notice, turn email on or off (and, on Business, the Windows app). Changes save right away.

Good to know

• Security emails, like sign-ins from a new device and password resets, always arrive.

Business

Teams, sign-in, and oversight

Put your whole company on one account, with the controls an admin needs.

How it works

1. Invite teammates by email and give them admin or member roles. Removing someone signs them out everywhere, instantly.
2. Require two-step verification for everyone, and turn on single sign-on with Microsoft 365, Google Workspace, or Okta after verifying your email domain.
3. Set team policies: the longest a squawk or request can last, allowed attachment types, and which email domains squawks can be sent to.
4. Add your logo to the links and emails your team sends, and review or export the audit trail as CSV.

Good to know

• Business is $49 per month for up to 5 users, then $8 per additional user.

Business

API and webhooks

Send squawks from your own systems, and hear back when things happen.

How it works

1. Create an API key, optionally limited to your networks. Keys are stored only as a one-way hash.
2. Have your onboarding system (an Active Directory script, Power Automate, Okta Workflows, Zapier, or your HR system) call the API to create a squawk, such as a new employee’s first-day password.
3. Add a webhook to be told when a squawk is opened, expires, or is destroyed, or when a Squawk Drop item arrives.

Good to know

• Squawks created through the API are encrypted on our servers, because your system sends us the contents to protect.
• Full details are in the API documentation.

Read the API documentation