A genuine link always starts with schluesselbot.de.
If anything other than this appears in the address bar, even if it looks similar, the link is not from SchlüsselBot. Please delete the message.
SchlüsselBot will never ask for your password, bank details or one-time code by phone or email.
Can I just click on it?
Yes. Simply opening the link doesn't use up anything yet. You'll initially see only a page with a button. The content is only displayed once you enter the one-time code and only then is it deleted. You can therefore review it calmly.
What do I need to do?
- Open the link.
- Tap “Send the code to my email”. You’ll receive a long string of numbers and letters in your email inbox. This confirms that you have access to the address.
- Select, copy, paste here. You don’t need to type it out; the result is intentionally long.
Does it look different to you? Some secure inboxes use stricter protection. In that case, the page will ask for the Passkey of the secure inbox owner instead of the one-time code, or it will ask for both. This does not affect you as the sender: only the secure inbox owner can confirm access, on their own device. Simply follow the instructions on the page.
You don't need an account, an app, or to install anything, not even on your phone. Just use the browser you already have.
Copy the code from the email
The code is long. You do not need to type it. Just copy it:
- In the email, twice briefly the code to select it.
- If the marker does not align precisely, drag the two blue dots at the start and end of the code.
- Tap on “Copy” .
- Return to the SchlüsselBot page, type into the input field, and select “Insert” .
On your computer, do the same: highlight the code with your mouse, Ctrl + C, then paste it into the field using Ctrl + V.
No email yet?
This is the most common case, and it almost always has one of four reasons:
- It is in the spam folder. Please check there first.
- You have already requested a code. A second one will arrive no sooner than two minutes later. The first one remains valid. Check your inbox for it.
- The code is sent to a different address. It is sent to the email address the sending individual. If they used an old address of yours, the message will be there. Just briefly ask which address they entered.
- The message has already been read or has expired. No code will be sent. The message no longer exists. Simply ask the sender to send a new one. This takes one minute and costs nothing. This will not incur any costs or disadvantages for you.
If after two to three minutes nothing appears and the spam folder remains empty, reason 3 or 4 is most likely. Then contact the person who sent you the link, not us: we cannot see what is in the message, nor can we resend it.
If a file is included
Save it immediately. The file is loaded directly into the page upon opening. It disappears as soon as you close the page or reload it, and we delete it permanently from the server no later than 10 minutes after opening. There will be no second attempt.
Security notice: The file is encrypted. SchlüsselBot therefore cannot scan it for malware. Store and check unknown files using your device's protection before opening them.
Important: Open the link on the device where you want the file to be stored later. If you open the link on your phone and save the file, it will be stored there. On an iPhone, you will find it in the Files app under Downloads. It will not also appear on your computer.
Only open the link when you have a few minutes to spare.
Why does it delete itself?
So your data doesn't sit in an inbox for years. A regular email remains readable: in your inbox, with the sender, and in backup copies. A SchlüsselBot link is valid exactly once and then disappears. That's the whole point.
If the link is not opened, it is automatically deleted usually after 48 hours. The sender can shorten this period or extend it to up to seven days. If in doubt, ask the sender.
Opened it too late?
The content is then gone for good. We cannot recover it because we never had the key. That may sound harsh, but it is exactly why no one else can read it.
What you need to do: Simply ask the sender to send it again. This costs nothing and takes one minute.
Does SchlüsselBot see my data?
The content is encrypted on the sender's device. The key is located in the final part of the link, after the # symbol. This part is never sent to a server by the browser, by technical necessity. What we see is your email address and the timestamp; we need these to send you the one-time code.
A limitation applies, and we prefer to state it clearly: If the sender selected the default “Simple” delivery method and you received this email through that route, the key briefly passed through our server so we could send you the link. We did not store or log it, but it was technically possible for us to read the key on that route. With the “Secure” delivery method, the sender shares the link themselves and we never see the key. For full details, see our Security page.
Who is behind this?
SchlüsselBot is a service provided by MessingerDesign GbR in Berlin. All servers are located in Germany. You can find our address, phone number, and responsible parties in the Legal notice. That is also where you can reach us if anything is unclear or seems suspicious.