A tiny Flask app to create encrypted secrets and share them securely, keeping sensitive info out of emails and chat logs.
Shhh is a web application that allows users to create encrypted secrets and share them via unique, expiring links. It solves the problem of sharing sensitive information like passwords or API keys through insecure channels like email or chat logs by ensuring secrets are encrypted and automatically deleted after use.
Organizations and individuals who need to share sensitive information securely, especially those concerned about data privacy and wanting to avoid plain-text secrets in communication logs.
Developers choose Shhh for its focus on security, self-hosting capabilities, and automatic deletion features, providing a lightweight, open-source alternative to commercial secret-sharing services with full control over deployment.
Share sensitive info without leaving a trace in your chat logs or email accounts.
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Uses Fernet with password, random salt, and 100,000 iterations, ensuring secrets are anonymous in the database and resistant to brute-force attacks.
Secrets are permanently removed after expiration, successful decryption, or exceeding decryption attempts, minimizing data exposure risks.
Supports Docker deployments and one-click Heroku setup, allowing organizations to host on private servers for enhanced security and control.
Includes a documented Swagger API and a Go-based command-line client (shhh-cli) for programmatic secret creation and retrieval.
Actively being sunset in favor of secretapi, meaning no future updates, bug fixes, or official support, making it risky for long-term use.
Requires managing a Flask app, database migrations, and environment variables, which can be cumbersome compared to drop-in SaaS alternatives.
Lacks advanced features like user authentication, audit logs, or support for non-text data, with secrets limited by SHHH_SECRET_MAX_LENGTH (default 250 characters).