Split expenses without making everyone sign up
There is a specific way group expense tools fail, and it has nothing to do with features. Two people join, the third never gets round to it, and from then on somebody is entering that person's spending on their behalf — or not entering it. The record stops being true, and a record that is not true is worse than none, because people act on it.
The sign-up is not a small step
From the inside it looks tiny: an email, a password, maybe a confirmation link. From the outside it is a decision about whether to give a company your details for a thing you did not ask for, made while you are doing something else. Most people will make that decision by not making it. The invitation sits in the chat, and everybody is polite about it. This is a known and stated gap rather than a guess. A review of the best-known app in the category asks for exactly this: "I wish splitwise allowed group splitting w/o requiring everyone to signup". The person is not asking for a feature. They are asking to be able to use the thing with the people they actually live with.
How a link works instead
The alternative is the one shared calendars and shared documents have used for years. The group gets a long, random web address, and holding that address is what lets you in. One person makes the sheet and pastes the link into the group chat. Everyone else taps it. There is no invitation to accept, no email to confirm and nothing to install — the page opens and there is the ledger, with an add button on it. The address is long enough that nobody guesses it. It is not a password and it is not pretending to be one; it is a key, and it behaves like a key.
What you give up
Two things, and it is worth being straight about both. A leaked link is a leaked ledger. If the address ends up somewhere it should not — forwarded on, screenshotted, left on a shared computer — whoever has it can read the sheet and write to it. There is no way to take it back from somebody who already has it. The answer is to start a new sheet, which takes about a minute. And there is no identity behind an entry. The sheet records the name somebody typed for themselves, not a verified person. In a group of four people who live together that is exactly enough; in a context where it would not be, this is the wrong shape of tool. In exchange, nothing about the group is stored beyond what the group typed: first names, what was bought, and the amounts. No email addresses, no phone numbers, no bank details.
What you get
A complete record, which is the only kind worth having. When the cost of adding an entry is one tap on a link that is already in the chat, entries get added — by the person who paid, at the time they paid, which is when they remember what it was for. The record stays true without anybody maintaining it. It also means the group can change without any administration. Somebody joins for the second half of the trip: they get the same link. Somebody's phone dies: they open it on a laptop. Nobody has to recover a password for a tool they use four times a year.
Keeping the link sensible
A few habits make the trade-off comfortable. Share it in the group's own chat rather than forwarding it onward, so the set of people who have it is the set of people who should. Treat a screenshot of the page the same way you would treat a screenshot of a bank statement — it has amounts in it. And if a sheet does get out, do not try to patch it. Start a new one, put the current balances in as an opening line, and share the new link. It costs a minute, which is the point of not having accounts in the first place.
Frequently asked questions
Can somebody guess the link?
No, in any practical sense. The address carries 128 bits of randomness, which is the same order of magnitude as a strong key — there is nothing to try. The realistic risk is a link being passed on by a person, not found by a machine.
What stops a stranger editing our sheet?
Not having the link. There is no directory, no search and no way to list sheets, so the address is the only route in. That is also why the address is worth guarding.
Can I remove someone's access?
Not from an existing sheet — a link that has been shared cannot be un-shared. Start a new sheet, carry the closing balances over as an opening entry, and share the new link with the people who should have it.
Do I need an account to start one?
No. With Splitsheet the person who creates the sheet does not sign up either. They name the group, type the first names, and get the link.
More guides
Other things we made
Also in English, made by the same people.
Also in English, made by the same people.
Also in English, made by the same people.
Also in English, made by the same people.