Expiring and password-protected messages

Send a message as a link that expires, with an optional password.

An expiring message is sent as a secure link instead of the message itself. The link stops working when the message expires.

Send one#

  1. Open the composer.
  2. Click Expire in the toolbar.
  3. Turn on Expiring message.
  4. Under Expires after, pick 1 hour, 1 day, 1 week or 4 weeks. The default is 1 week.
  5. Optionally enter a password.
  6. Click Done, then send.

The toolbar chip then shows the choice, for example "Expires in 1 week · password".

Password or no password#

SetupWho can open itCan the server read it
Expiry onlyAnyone with the linkYes
Expiry and passwordPeople with the link and the passwordNo

With a password, the message is encrypted with AES-256-GCM using a key derived from the password, so SipherMail cannot read it. The password must be at least 6 characters. Share it another way, such as a call or text.

Limits#

  • The expiry options are fixed to the four above.
  • You cannot combine an expiring message with end-to-end encryption. Turn off one to use the other. The mobile composer shows a message if you try both.
  • On the web the Expire control is greyed out while end-to-end encryption is on.

Mobile#

The iPhone and Android composers have the same expiry and password options.

Last updated 1 November 2026