---
title: "E2E Encrypted"
method: POST
path: "/v1/share/secrets/encrypted"
---

# E2E Encrypted

`POST /v1/share/secrets/encrypted`

Generate a Doppler Share link by sending an encrypted secret. The receive flow the user goes through will be end-to-end encrypted where the encrypted secret will be decrypted on the browser.

## Request body

- object
  - `encrypted_secret` string, required — Ecrypted secret using AES-GCM with a symmetric key derived from a cryptographically random 64 character passphrase using PBKDF2. 1,000,000 salt rounds required. Then base64 encode the encrypted secret.
  - `hashed_password` string, required — SHA256 hash of the password. This is NOT the hash of the derived encryption key.
  - `expire_views` integer — Number of views before the link expires. Valid ranges: 1 to 50. -1 for unlimited.
  - `expire_days` integer — Number of days before the link expires. Valid range: 1 to 90.
  - `encryption_kdf` string, required — The key derivation function used. Must by "pbkdf2".
  - `encryption_salt_rounds` integer, required — Number of salt rounds used by KDF. Must be "1000000".

## Response `200`

200

- object
  - `url` string
  - `success` boolean

---

[API](https://skmtc.net/doppler/apis/core.md) · [All operations](https://skmtc.net/doppler/apis/core/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/doppler/core/revisions/8f244bc5b038/schema)