Repolode
pglombardo

pglombardo/PasswordPusher

Open source web app for sharing passwords, notes, files and URLs through one-time links that expire by views or time, with audit logs.

Stars
3,232
Forks
474
Open issues
111
Last commit
14 hours ago

What is it?

Password Pusher is an open source web app for sending sensitive information without leaving it in chat or email. You push a password, note, file, or URL and receive a link that stops working after a set number of views, after a set amount of time, or both. Links can also require a passphrase. Once expired, the stored data is removed.

The app keeps an audit trail of when each push was created and viewed, and by whom when logins are used. It can be run as a hosted service at pwpush.com or self-hosted with Docker Compose, which includes automatic TLS via Let's Encrypt. Deployment is also supported on Kubernetes, Helm, and several cloud platforms.

For administrators, it provides a built-in admin dashboard, TOTP-based two-factor authentication, and white-label options such as themes, logo, and site name. It also offers a JSON API v2, a legacy API, an official CLI, and a Chrome extension. The UI is available in 31 languages.

Key features

  • 01Shares passwords, text, files, and URLs via expiring links.
  • 02Expires links by view count, time, or both, with optional passphrases.
  • 03Keeps audit logs of who created and viewed each push.
  • 04Supports TOTP two-factor authentication with backup codes.
  • 05Offers Docker Compose deployment with automatic TLS.
  • 06Provides a JSON API v2, an official CLI, and a Chrome extension.

Use cases

  • Sending a database password or API key to a colleague without leaving it in chat history.
  • Sharing a one-off file with a client through a link that disappears after a few views.
  • Hosting a private, self-managed secret-sharing service for a team or company.
  • Automating secret delivery from scripts or CI pipelines using the API or CLI.

Quick start

  1. 1

    Point a DNS record to your server

  2. 2

    Download docker-compose.yml from the repo

  3. 3

    Set TLS_DOMAIN and optionally PWPUSH_MASTER_KEY in docker-compose.yml

  4. 4

    Start the app with Docker Compose

    docker compose up -d

Things to know

  • Self-hosting requires a server, a DNS record and Docker setup.
  • Pro features are sold separately and not all are in the open source edition.

In collections

Topics

FAQ

What is PasswordPusher?
Open source web app for sharing passwords, notes, files and URLs through one-time links that expire by views or time, with audit logs. Password Pusher is an open source web app for sending sensitive information without leaving it in chat or email. You push a password, note, file, or URL and receive a link that stops working after a set number of views, after a set amount of time, or both. Links can also require a passphrase. Once expired, the stored data is removed.
Is PasswordPusher free to use? What license does it have?
PasswordPusher is open source under the Apache-2.0 license. Check the license terms before using it in commercial products.
Is PasswordPusher still maintained?
Actively maintained. The last commit to PasswordPusher was on Oct 24, 2026.
What can I use PasswordPusher for?
Sending a database password or API key to a colleague without leaving it in chat history. Sharing a one-off file with a client through a link that disappears after a few views. Hosting a private, self-managed secret-sharing service for a team or company. Automating secret delivery from scripts or CI pipelines using the API or CLI.
How do I install PasswordPusher?
Point a DNS record to your server Download docker-compose.yml from the repo Set TLS_DOMAIN and optionally PWPUSH_MASTER_KEY in docker-compose.yml Start the app with Docker Compose: docker compose up -d
Where can I get PasswordPusher?
The source code and installation instructions are on GitHub: https://github.com/pglombardo/PasswordPusher

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects