jhaals/yopass

Health v2 · maintenance only

Adoption not part of the score

3087 stars · 438 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Yopass is a self-hostable web application for securely sharing secrets, passwords, and files via one-time, auto-expiring links. Secrets are encrypted in the browser with OpenPGP before upload, so the server only ever stores ciphertext and the decryption key never leaves the sender's machine.

Use cases

• share a password with a colleague without it living in Slack
• send an API key or database credential via a one-time link
• securely receive credentials from vendors or clients
• share sensitive files that self-destruct after viewing
• avoid plaintext secrets in email and ticket systems
• self-host an alternative to OneTimeSecret

When to choose

• you need end-to-end encrypted, one-time secret links you fully control
• you want a lightweight Go server deployable via Docker or Kubernetes with Memcached/Redis/S3 backends
• you need compliance features like audit logging, OIDC sign-in, read receipts, and webhooks (with a business license)

When to avoid

• you need full team password management with a vault, not ephemeral link sharing
• you require all governance features (OIDC, audit logs, webhooks, theming) without paying for a license
• you want a managed service with zero infrastructure to run

Facets

application · maturity active

cryptography security file-upload webhook auth self-hosted http-server security privacy self-hosted web-development developer-tools self-hosted go browser secret-sharing one-time-links end-to-end-encryption openpgp password-sharing onetimesecret ephemeral-secrets web-server docker kubernetes

Member repositories

For agents

markdown · JSON · MCP: product_card(name="jhaals/yopass")