All 79 Dependencies
Every package OnetimeSecret depends on, ranked by repo health score.
OnetimeSecret is a mature, self-hostable platform for sharing secrets securely. It generates unique one-time URLs that permanently delete their contents after being viewed once—ensuring sensitive data like passwords, API keys, or private notes never persist in email threads, chat histories, or log files.
The platform supports two authentication modes to match your operational needs: Simple mode uses Redis only for fast, lightweight deployments, while Full mode adds SQL-backed authentication with multi-factor authentication via TOTP, hardware security keys via WebAuthn, SSO via OpenID Connect, and organization management with role-based permissions. Both modes support anonymous secret sharing for situations where account creation would be a barrier.
Deployment is designed to be straightforward with official Docker images, Docker Compose configurations for both minimal and full-stack setups, and an `install.sh` script that handles environment generation and secret key derivation via HKDF. For teams running at scale, optional RabbitMQ integration enables asynchronous email delivery and scheduled maintenance jobs, while Caddy-based on-demand TLS supports custom branding domains per organization.
With over a decade of active development, nearly 3,000 stars, frequent releases tracking to v0.25, and support for 27 languages, OnetimeSecret represents one of the most comprehensive open-source implementations of ephemeral secret sharing available.