Hemmelig

Hemmelig is a self-hosted secret sharing service for securely sending sensitive information (tokens, passwords, notes, and files) using end-to-end encryption in the browser. It creates shareable links that can be configured to expire, be viewed only a limited number of times, and optionally require a password.

Key Features

• End-to-end encryption (encryption/decryption happens client-side)
• One-time or limited-view secrets with configurable view count
• Expiration controls (time-based) to automatically invalidate secrets
• Optional password protection in addition to E2EE
• File and text secret support (depending on deployment configuration)
• Simple web UI for creating and retrieving secrets
• API support for programmatic secret creation (documented in project materials)

Use Cases

• Share deployment credentials, API keys, and recovery codes with teammates
• Send temporary access details to contractors with automatic expiry
• Provide one-time links for sensitive onboarding information

Limitations and Considerations

• E2EE means lost client-side password/key cannot be recovered by the server
• Operational security depends on correct HTTPS/TLS setup and secure hosting

Hemmelig is suited for organizations and individuals who need a straightforward, auditable way to share secrets with strong client-side encryption and automatic lifetimes. It focuses on minimizing exposure by limiting how long and how often a secret can be accessed.