Self-destructing image links: how they work
A self-destructing image link (also called a burn-after-reading or one-time image link) is a URL that shows a picture once and then permanently deletes it. Instead of sending the file itself, you send a link to an encrypted copy that is destroyed the moment it is viewed.
What happens behind the scenes
- Encryption on upload. OneView encrypts your image with AES-256-GCM before saving it. The stored data is unreadable without the server's key.
- A random, unguessable link. Each image gets a long random token, so links cannot be guessed or listed.
- One unlock. When the recipient opens the link, the server decrypts the image once and sends it to their browser for display.
- Immediate deletion. In the same step, the encrypted image data is deleted from storage, and the link is marked as burned.
- Dead link afterwards. Any later visit to that link is redirected away. There is nothing left on the server to show.
Self-destructing link vs. normal sharing
| Chat attachment | Cloud share link | Self-destructing link | |
|---|---|---|---|
| Copy saved in recipient's chat | Yes | Link stays | No |
| Can be opened again later | Yes | Yes, until you revoke it | No, one view only |
| Can be forwarded and reopened | Yes | Yes | No, already burned |
| Works in any app | Mostly | Yes | Yes |
| Screenshot deterrence | No | No | Yes |
| Auto-expires if never opened | No | Sometimes | Yes, after 24 hours |
What a self-destructing link can and cannot do
It does make sure the image is not stored in the recipient's chat history, cloud backup or downloads folder, and that a forwarded link is useless. It cannot stop a determined person from photographing their screen with another device. OneView adds screenshot deterrence and optional forensic watermarks to make that harder and traceable, but you should still only send sensitive images to people you trust.
Good uses for one-time image links
- Showing an ID, passport or proof of address for a quick check
- Sending a screenshot of a password, Wi-Fi key or recovery code
- Sharing a private photo that should not live in someone's camera roll
- Previewing a design, invoice or contract without handing over the file
Preview bots and link unfurling
Many chat apps fetch links automatically to build a preview. OneView only burns an image when a person actually unlocks it in the viewer, so a link preview does not use up the single view.