Private text, encrypted before it leaves the browser: Enclosed turns passwords, keys, and other secrets into a link that only its holder can open, with no third-party service in between. Can the server read the note? No. It stores only ciphertext and settings, because the decryption key rides in the part of the link after the # sign, which browsers never send. Want a second lock? Add a password, or generate a random one with a click, and share it by another route. Worried about links lingering in chat history? Pick one hour, one day, one week, or one month, and tick Delete after reading so the first view removes the note, with a warning shown to the recipient beforehand. Need more than text? Attach files by button or drag and drop, and recipients download them one by one or all at once. Sending to a phone? Every finished note offers a QR code, downloadable as SVG or PNG. Setting it up for a team? Restrict note creation to signed-in users, create notes from the command line, and let people read the interface in 17 languages with light, dark, or system themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

OneTimeSecret turns a password or private note into a single-use link that destroys itself the moment the recipient opens it. Create a secret in seconds from the web form: paste the text, optionally lock it behind a passphrase, and pick how long the link stays alive, from minutes to days. Send the generated link by email straight from the app, or drop it into any chat or ticket where a credential needs to change hands. Because the link burns after one view, a forwarded message or an old thread search cannot leak what was shared; once the recipient reads it, the content is gone for good. An API issues secrets programmatically, so scripts can hand database passwords or access tokens to teammates without writing them into CI logs or shell histories. Use it anonymously for quick one-off shares, or switch on full authentication with accounts, multi-factor authentication, and WebAuthn keys for a controlled internal service. Custom domains let the links carry your own hostname, so recipients see a service your organization operates rather than a public website. Admins manage users, domains, and access from a built-in console suited to teams that hand over credentials every day. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

With nearly 3,000 GitHub stars and active development since 2014 through version 14.2.0, Yopass eliminates the universal bad habit of sharing passwords and API keys through Slack messages, email threads, and ticket systems by encrypting secrets entirely in the browser using OpenPGP before anything reaches the server. The Go backend stores only ciphertext — it never sees plaintext — while the React frontend handles all encryption and decryption client-side, generating one-time URLs that self-destruct after a single viewing or when the configured expiration of one hour, one day, or one week passes. File upload support streams encrypted files with configurable size limits, and optional custom password protection adds a second encryption layer beyond the URL-embedded key. The server supports Redis or Memcached as storage backends with automatic key expiration, deploying via Docker Compose in under five minutes or as Kubernetes manifests for production environments. Built-in TLS support works alongside reverse proxy configurations for Nginx, Caddy, and Traefik with automatic Let's Encrypt certificate provisioning. Prometheus metrics expose HTTP request counts, latency histograms, and secret lifecycle counters for Grafana dashboard integration and alerting. Read-only mode enables split-instance deployments separating secret creation from retrieval across different network zones. Multi-language support localizes the interface for international teams. The open-source core under Apache 2.0 provides full self-hosted functionality with no account management required. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. Apache-2.0 licensed.

Stop pasting passwords into chat threads that keep them forever: 1time turns a secret into a link that opens once and then deletes itself. Paste a database URL, an API key, or any sensitive text, choose how long the link may live, from an hour to thirty days, and decide whether one person or up to ten may open it. Add a passphrase when the link alone should not be enough, then copy the ready link and send it through whatever channel you already use. The recipient opens it, sees the decrypted message with a copy button, and the message is burned, gone from the server the moment it is read. Files work the same way up to 250 MB, encrypted with their name and type and uploaded in pieces so a dropped connection only resends one chunk. Encryption happens in your browser before anything uploads, and the key travels inside the link itself, so the server holds only ciphertext it cannot read. A password generator, a command line client, and a browser extension that shares selected text speak the same protocol against your own instance. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Credentials sitting forever in email threads and chat scrollback - Password Pusher solves that everyday security failure. Instead of pasting a password into Slack, you push it - a password, note, file, URL, or QR code - and share a unique one-time link that expires after a set number of views, a time limit, or both. Content is encrypted at rest with AES-GCM under a configurable master key, optionally guarded by a passphrase, and permanently deleted from the database the moment it expires; a retrieval-step option keeps URL-scanning bots from consuming views. Full audit logs record when each link was created and viewed (and by whom, with logins), and TOTP two-factor authentication can be required instance-wide. The delivery page is deliberately unbranded - no logos or confusing links for recipients - and the interface ships in 31 languages with light and dark themes. Automation runs through a JSON API (v2), an official CLI for pushing and expiring secrets from the terminal, a Chrome extension, and a catalog of third-party integrations. Apache-2.0 licensed Ruby on Rails, deployable via Docker, Kubernetes, or Helm, with SQLite or PostgreSQL storage - the sysadmin staple for sending credentials that clean up after themselves.

Only the person holding the link can open what you share with SkySend, a self-hosted file and note sharing service that encrypts everything in the browser before it leaves your device. Sending a contract? Drop in the file, several files, or a whole folder, and share the link. Need documents from a client? Send an upload link instead, and whatever comes back is encrypted for you alone. Handing over a password or an SSH key? Write it into a note that burns after reading. Notes can mix text, Markdown, generated passwords, and highlighted code in a single page. Every share can expire by time, stop after a set number of downloads or views, and carry an optional password as a second lock. The command-line client uploads, downloads, and reads notes with the same encryption, and its full-screen mode shows each link as a QR code. No accounts are needed: My Links keeps your shares in the browser, and optional OIDC sign-in limits who may create them. Encrypted uploads sit on local disk or any S3-compatible bucket, and the interface offers 13 languages and three themes. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

PrivateBin shares text and files with true zero-knowledge encryption: the server stores only ciphertext it cannot decrypt because the key exists exclusively in the URL fragment that never reaches the server. With over 8,400 GitHub stars and 500,000+ Docker pulls, it has become the standard for privacy-respecting paste sharing where not even the hosting operator can read stored content. All encryption uses 256-bit AES in Galois Counter mode performed entirely client-side in the browser. Burn-after-reading mode destroys pastes on first view, while configurable expiration timers automatically purge content after periods ranging from five minutes to forever. Optional password protection adds a second encryption layer requiring recipients to enter a passphrase before decryption occurs. Discussion threads enable anonymous or nickname-based commenting on pastes with IP-based identicon avatars for visual identity. Markdown rendering with live preview formats pastes as styled HTML, and syntax highlighting through prettify.js supports dozens of programming languages across four color themes. File upload support enables sharing images, PDFs, and media files with in-browser preview. QR code generation converts paste URLs for mobile device transfer. Customizable templates include Bootstrap 5, classic Bootstrap CSS, and Darkstrap themes. Storage backends support filesystem, MySQL, PostgreSQL, SQLite, Amazon S3, and Google Cloud Storage. Deploy via Docker with the privatebin/nginx-fpm-alpine image on port 8080. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. zlib licensed.

Paaster is the pastebin for snippets too sensitive for a public paste site: every paste is encrypted in your browser before upload, so the server only ever stores ciphertext it cannot read. Paste code or logs and the text is sealed with libsodium the moment you stop typing, with the secret riding in the link fragment that browsers never send to a server. Share the link and only its holder can open the paste; share it as a QR code, or beam it to your other device with a five-minute code using Send to device. Set a paste to delete after its first view or after a chosen time, protect it with an access code, and let automatic language detection syntax-highlight the result. Your own pastes stay browsable in a local history, themes and keyboard shortcuts keep the editor fast, and drag-and-drop file sharing works the same encrypted way. Upload from the terminal with the companion CLI or the REST API, and store everything in MongoDB with MinIO, S3, or Cloudflare R2 holding the encrypted blobs. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Share code snippets, logs, configs, and notes without registration, tracking, or ads: Lenpaste is a minimal, self-hosted, anonymous alternative to pastebin.com. It is deliberately spartan in the right ways: no accounts, no JavaScript required (the entire site works in text browsers and hardened setups), and cookies used solely to store display preferences. Pastes support syntax highlighting across a long list of languages (from ApacheConf and Arduino to mainstream stacks), configurable expiration from minutes to unlimited, one-use "burn after reading" pastes that self-delete on first view, optional author attribution, and iframe embedding for dropping pastes into other pages. The form-encoded HTTP API covers everything the UI does - create pastes with title, syntax, expiration, and line-ending normalization, fetch them by ID, and query server capabilities - making it trivial to pipe command output to your paste server from shell scripts. Server operators control maximum title and body lengths, maximum paste lifetime, rate limits for viewing and creation, search-engine indexing policy, and can lock private instances behind HTTP Basic authentication. It deploys as a single lightweight Docker container, giving your team a snippet-sharing endpoint where the content never touches a third-party service.

Upload a file, get a unique download link and a separate delete link - Jirafeau has done exactly this one thing since 2008. It is plain PHP with no database, no mail server, no JavaScript framework, and no external dependencies - files and metadata live on the filesystem, which is why it runs on nearly anything and why it has outlasted most of its imitators. Uploads use the HTML5 file API, so PHP's post_max_size ceiling does not constrain file size, with live progress showing speed, percentage, and time remaining. Every upload takes options: expiration from one minute to a year to unlimited, self-destruct after first download, and password protection with configurable policy - passwords can be optional, required, or server-generated with complexity rules. Server-side encryption (modern builds use XChaCha20-Poly1305) stores files encrypted at rest with the decrypt key embedded only in the download URL, never on the server, so a compromised host cannot read the contents. Unencrypted deployments get file-level deduplication - identical files stored once with multiple links. Upload access can be gated by password lists or IP allowlists, a small admin panel manages stored files, and a CLI cleanup script handles expired files via cron. Recipients can preview supported files in-browser.

Upload files, get a share link, let it expire: PsiTransfer is a self-hosted WeTransfer with no accounts, no logins, and no third-party cloud with size caps and metadata harvesting. The engineering focus is large files over imperfect networks. Uploads use the tus.io resumable protocol, so a dropped connection on a multi-gigabyte video resumes exactly where it stopped once you're back online; downloads support HTTP range headers for the same resilience, and everything streams, so file size is bounded by your disk rather than memory. Files organize into upload buckets with retention you control: expire after a set time (up to weeks) or after a one-time download, with automatic cleanup when links lapse. Recipients need nothing installed - they open the link, preview files in modal views, and grab everything as a zip or tar.gz archive with one click. Buckets can be password-protected (AES-encrypted download lists), and security-through-obscurity is done properly: bucket URLs use hashed UUID tokens and stored filenames are replaced with UUIDs. An optional admin page (enabled by setting an admin password) lists bucket information and storage. The Vue.js frontend ships under 100 KB gzipped and is fully responsive. Honest caveat from the author: no end-to-end payload encryption yet. BSD-licensed, Docker-ready.

QuickDrop functions as an ephemeral, self-hosted file distribution node and pastebin that eliminates account requirements for rapid data transfers. Users can drag individual files, paste plain text code snippets, or drop entire folder structures while preserving complete directory hierarchies through automated client manifests. Resumable chunked transfers split multi-gigabyte payloads into resilient blocks, ensuring dependable uploads over unstable network connections. Senders can protect sensitive documents with optional AES encryption at rest, individual passphrase requirements, and automatic metadata stripping that removes GPS coordinates and camera EXIF markers. Granular share token policies restrict access by enforce maximum download quotas, burn-after-reading limits, or strict calendar expiration timestamps. In-browser viewers generate instant previews for code syntax, Markdown documentation, PDF reports, audio tracks, and high-resolution images without downloading files locally. Built-in QR code generators allow mobile devices to retrieve shared payloads instantly across local wireless networks. System operators can govern storage lifecycles through an administrative control panel with configurable retention windows, automated background garbage collection, and custom storage caps. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Sharing a file with one command is the whole idea: pipe a file to Rustypaste with curl and get back a short URL with a memorable random name like square-fish.txt. Links can expire after a set time, vanish after a single view, or require a password hashed with Argon2id before the file opens. The service also shortens long URLs, fetches files from remote addresses for you, and removes duplicate uploads so the same file is not stored twice. Everything lives on the local filesystem, which means no database to provision, back up, or tune; configuration reloads while the server keeps running. An upload form is available for browser users, HTTP authentication guards private instances, and file listing and deletion endpoints keep housekeeping scriptable. It ships as a single binary and an official Docker image, so a personal file-sharing endpoint can be running on a server in minutes and stay out of the way afterward. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Most file sharing leaves copies lying around forever; Tessera shares things with a built-in goodbye. Drop in a file, a whole folder, a code snippet, or a link and you get back a short code and a URL that anyone can open until it expires or hits the download count you set, at which point it is deleted. Expiry is checked on every request and each retrieval is counted atomically, so a one-time share cannot be raced by two people at once. Passwords can be required before anything is shown, code arrives syntax-highlighted, and images, SVGs, and diagrams preview in the page, with link cards when you paste the URL into chat. Uploads resume after interruptions and stream through the server without ballooning memory at any size. Behind the scenes you choose where bytes live: local disk, S3-compatible storage, Azure Blob, Google Cloud Storage, or WebDAV, several at once, added or retired from the admin panel without a restart. Accounts are optional for a home server, sign-in through OpenID Connect suits a team, and roles with per-account quotas decide who may upload, view everyone's shares, or change settings. Optional malware scanning, anonymous-upload caps, and rate-limited code lookups keep a public instance honest. A CLI and API tokens drive the same endpoints as the web app, so scripts can share and clean up exactly like people. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

Peergos is a peer-to-peer encrypted drive, messenger, email client, and private social network where your files and friendships stay unreadable to the server that stores them. You browse, upload, and organize files in a familiar web drive, then share a folder with a friend or send anyone a secret link whose key never travels to the server, so the link itself cannot leak what it opens. The built-in messenger handles private conversations, an encrypted email client with a bridge reaches the outside mail world, and the social feed shows posts only to the people you chose, with even the friend graph hidden from the operator. Web apps run from Peergos inside a sandbox and see only the data you grant them, which turns the drive into a private place to run tools rather than a folder other services reach into. Because encryption happens on your machine before anything is stored, a compromised server yields ciphertext and no file names, sizes, or sharing relationships. Host it at home and the same account gives your household storage plus its own communication platform; log in from any browser without carrying keys, because your password rebuilds them. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.