The Hemmelig.app project shares encrypted secrets to help keep sensitive information out of chat logs, email, and similar channels.
Ots
Share one-time secrets through a browser-based platform that encrypts them with AES before sharing.
About Ots
Ots is a self-hosted one-time-secret sharing platform. Secrets are encrypted in the browser with symmetric 256-bit AES before upload, and the generated URL contains the secret ID and password. The password is not sent to the server, so the server cannot decrypt stored secrets with reasonable effort, and the secret is deleted on first read.
It runs from a release download or Docker image on http://localhost:3000/, with in-memory or Redis storage and a configurable expiry time. A command-line tool can create secrets from stdin or files and fetch them for use in scripts.
Key features
- Browser-side AES 256-bit encryption before upload to server
- One-time retrieval with deletion on first read
- Self-host via Docker image or release binary
- In-memory or Redis storage backends for secrets
- Configurable secret expiry in seconds via setting
- Command-line tool to create and fetch secrets in scripts
Best for: People who self-host services and need to share single-use secrets or files.
Good for
- Server does not receive plaintext secret or decryption password
- Secrets are deleted on first read
- Self-hostable with Docker and a choice of storage backends
Watch out for
- In-memory storage is wiped on restart of the daemon
- API technically accepts plaintext secrets, which would expose content to server
Ots at a glance
- Website
- github.com/Luzifer/ots
- Type
- Open-source project
- Pricing
- Not confirmed. Check the site
- Open source
- Yes · Source code
- Language
- English
- Last checked
- Oct 5, 2026 · Online when checked
- Listed
- Oct 5, 2026
Ots alternatives
Tools and sites you could use instead, ranked by how closely they match.
Tuta is an email service whose repository says it encrypts emails, contacts, and calendar entries across users’ devices.
Open source
24 alternativesYopass encrypts secrets in the browser and creates one-time links that expire, providing a way to share sensitive information without accounts.
With backup and sync, Stingle Photos offers a gallery and camera app; its page says photos and videos are encrypted before storage.
SafeNote encrypts notes or files and shares them through links that expire after they are read, with selectable message lifetimes.
Portable Secret creates self-contained HTML files that decrypt messages or files locally in a browser using a password.
Popular in Encryption & Private Sharing
Well-known listings from the same topic.
Proton Mailproton.me/mailMIT PGP Key Serverpgp.mit.eduPassword Pusherpwpush.comNordLockernordlocker.comBurn My Noteburnmynote.linkPeergospeergos.org
Ots FAQ
How does Ots keep the server from reading secrets?
The secret is encrypted in the browser with AES-256 before upload. The URL contains the ID and password, the password is never sent to the server, and the secret is deleted on first read.
How do I run Ots?
Download the release or pull the Docker image from ghcr.io/luzifer/ots, start it, then access the server on http://localhost:3000/. Consult ./ots --help for more options.
What storage options are available?
Mem stores secrets in memory and is wiped on restart. Redis stores secrets in a hash using REDIS_URL and REDIS_KEY. Expiry is set with SECRET_EXPIRY in seconds, where 0 means no expiry.
Is something wrong or out of date?
Tell us and an editor will check it.
Own this website?
Claim this listing
Claim the listing and suggest updates yourself. An editor checks every claim first.