Request a secret

Send someone a link instead of asking them to email a password. What they submit is encrypted to a key only you hold. You read it once, then it burns.

Shown to them on the request page. It travels inside the link, so we never see it.