A CLI tool to share end-to-end encrypted secrets via one-time URLs that self-destruct after viewing or expiry.
OTS is a command-line tool that enables secure sharing of sensitive data through end-to-end encrypted one-time URLs. It solves the problem of safely transmitting secrets like API keys or passwords by ensuring they are destroyed after a single view or after a set expiration period. The tool is designed for ephemeral secret exchange with configurable data residency options.
Developers, system administrators, and security-conscious teams who need to share credentials, API keys, or other secrets securely with third parties or within their organization.
Developers choose OTS for its strong security model—end-to-end encryption and self-destructing secrets—combined with CLI convenience and pipeline integration, making it a trusted alternative to insecure sharing methods like email or chat.
🔐 Share end-to-end encrypted secrets with others via a one-time URL
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Secrets are encrypted on your device before transmission, ensuring end-to-end security as highlighted in the README, so only the recipient can decrypt them.
Generates unique URLs that become invalid after a single view, preventing secret reuse and enhancing security for ephemeral sharing.
Secrets self-destruct after viewing or upon configurable expiry, minimizing data persistence risks and aligning with the tool's ephemeral philosophy.
Allows selection of geographic regions for secret storage using the --region flag, addressing compliance and data sovereignty needs as per the README.
Accepts secrets via stdin for automation, enabling seamless use in scripts and CI/CD pipelines, demonstrated with examples like pbpaste | ots new.
Relies on sniptt.com servers for storing encrypted secrets, creating vendor lock-in and requiring trust in an external service, as indicated by the web version link.
Secrets are always ephemeral and cannot be persisted, confirmed in the FAQ discussion, which limits use cases requiring archival or repeated access.
Lacks a graphical or web-based UI beyond the hosted version, making it less accessible for non-developers or quick ad-hoc sharing without terminal access.