Burn-after-read encrypted notes, with the key kept in the link fragment and a CLI for terminal output
- Deploy
- One-click
- License
- MIT
- GitHub stars
- 256 stars
- Last commit
Self-hosted alternatives to Onetime Secret
Onetime Secret is a service that turns sensitive text into a link that can be viewed only once. One listed app does its main job and runs in your own Cloudflare account.
Each answer comes from the app’s README and source code, compared with the features Onetime Secret describes on its own site.
Onetime Secret features, app by app
| Feature | binthere |
|---|---|
| Create a secret and share it as a one-time link | Yes |
| Secret is deleted after it is viewed once | Yes |
| Set an expiration time | Partly |
| Optional passphrase | Yes |
| Secret is stored encrypted | Yes |
| API for creating secrets from scripts | Partly |
Burn-after-read encrypted notes, with the key kept in the link fragment and a CLI for terminal output
- What a Onetime Secret user would miss
- A choice of expiry time in the interface and a plain-text API, since scripts must encrypt locally with the CLI.
- What it adds
- Encryption happens in the browser and the key stays in the link fragment, so the server never holds plaintext, and there are no accounts or analytics.
- Yes Create a secret and share it as a one-time link. Link with the note ID and key after the #, no account needed.
- Yes Secret is deleted after it is viewed once. Atomic single read, later requests get 410 Gone.
- Partly Set an expiration time. The UI fixes expiry at 24 hours; the wire format allows other values.
- Yes Optional passphrase. Optional password mixed into the key derivation.
- Yes Secret is stored encrypted. Encrypted in the browser with AES-256-GCM, server stores only ciphertext.
- Partly API for creating secrets from scripts. HTTP API accepts only client-encrypted payloads; the npm CLI does the encryption.
Sources:github.com/nxfu/binthere#readmeonetimesecret.com/docs.onetimesecret.com/