Self-hostable, open source service for sharing self-destructing encrypted notes and files, inspired by PrivNote, with a Rust backend and Svelte frontend.
pglombardo/PasswordPusher
Open source web app for sharing passwords, notes, files and URLs through one-time links that expire by views or time, with audit logs.
- Stars
- 3,232
- Forks
- 474
- Open issues
- 111
- Last commit
- 14 hours ago
What is it?
Password Pusher is an open source web app for sending sensitive information without leaving it in chat or email. You push a password, note, file, or URL and receive a link that stops working after a set number of views, after a set amount of time, or both. Links can also require a passphrase. Once expired, the stored data is removed.
The app keeps an audit trail of when each push was created and viewed, and by whom when logins are used. It can be run as a hosted service at pwpush.com or self-hosted with Docker Compose, which includes automatic TLS via Let's Encrypt. Deployment is also supported on Kubernetes, Helm, and several cloud platforms.
For administrators, it provides a built-in admin dashboard, TOTP-based two-factor authentication, and white-label options such as themes, logo, and site name. It also offers a JSON API v2, a legacy API, an official CLI, and a Chrome extension. The UI is available in 31 languages.
Key features
- 01Shares passwords, text, files, and URLs via expiring links.
- 02Expires links by view count, time, or both, with optional passphrases.
- 03Keeps audit logs of who created and viewed each push.
- 04Supports TOTP two-factor authentication with backup codes.
- 05Offers Docker Compose deployment with automatic TLS.
- 06Provides a JSON API v2, an official CLI, and a Chrome extension.
Use cases
- Sending a database password or API key to a colleague without leaving it in chat history.
- Sharing a one-off file with a client through a link that disappears after a few views.
- Hosting a private, self-managed secret-sharing service for a team or company.
- Automating secret delivery from scripts or CI pipelines using the API or CLI.
Quick start
- 1
Point a DNS record to your server
- 2
Download docker-compose.yml from the repo
- 3
Set TLS_DOMAIN and optionally PWPUSH_MASTER_KEY in docker-compose.yml
- 4
Start the app with Docker Compose
docker compose up -d
Things to know
- Self-hosting requires a server, a DNS record and Docker setup.
- Pro features are sold separately and not all are in the open source edition.
In collections
Topics
FAQ
- What is PasswordPusher?
- Open source web app for sharing passwords, notes, files and URLs through one-time links that expire by views or time, with audit logs. Password Pusher is an open source web app for sending sensitive information without leaving it in chat or email. You push a password, note, file, or URL and receive a link that stops working after a set number of views, after a set amount of time, or both. Links can also require a passphrase. Once expired, the stored data is removed.
- Is PasswordPusher free to use? What license does it have?
- PasswordPusher is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
- Is PasswordPusher still maintained?
- Actively maintained. The last commit to PasswordPusher was on Oct 24, 2026.
- What can I use PasswordPusher for?
- Sending a database password or API key to a colleague without leaving it in chat history. Sharing a one-off file with a client through a link that disappears after a few views. Hosting a private, self-managed secret-sharing service for a team or company. Automating secret delivery from scripts or CI pipelines using the API or CLI.
- How do I install PasswordPusher?
- Point a DNS record to your server Download docker-compose.yml from the repo Set TLS_DOMAIN and optionally PWPUSH_MASTER_KEY in docker-compose.yml Start the app with Docker Compose: docker compose up -d
- Where can I get PasswordPusher?
- The source code and installation instructions are on GitHub: https://github.com/pglombardo/PasswordPusher
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
Self-hosted file sharing server in Go with expiring links, optional S3 storage, and no public uploads, positioned as an alternative to Firefox Send.
Runs Windows inside a Docker container with automatic download and unattended installation, accessed through a browser or RDP.
A lightweight, web-based realtime log viewer for Docker containers, with Swarm and Kubernetes-related support, that stores no log files.
A self-hosted, single-binary pastebin and file-sharing web app written in Rust, with optional encryption and URL shortening.
A peer-to-peer, end-to-end encrypted file storage, messaging and social network platform built on IPFS, with self-hosting support.