Hemmelig.app

hemmelig.app
Hemmelig.app

Share rich text and files securely with locally encrypted messages that automatically self-destruct, or invite others to send you a secret. Allows setting maximum views, webhooks, expiration times and IP restrictions. Open source and self-hostable.

Open Source

Hemmelig.app Source Code

Author

HemmeligOrg

Description

Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.

#cli#encryption#gdpr#hacktoberfest#onetimesecret#password#personal-data#privacy#privacy-enhancing-technologies#privacy-protection#privacy-tools#secret#security#self-hosted#sensitive-data

Homepage

https://hemmelig.app

License

NOASSERTION

Created

13 Jun 21

Last Updated

08 Jul 26

Latest version

v7.4.8

Primary Language

TypeScript

Size

31,557 KB

Stars

1,222

Forks

101

Watchers

1,222

Language Usage

Language Usage

Star History

Star History

Recent Commits

  • bjarneo (15 May 26)

    Add maintainer request to README Added a note about seeking serious maintainers for the project.

  • Bjarne Øverli (23 Mar 26)

    Target the entire route

  • Bjarne Øverli (23 Mar 26)

    Remove csp from swagger

  • Bjarne Øverli (23 Mar 26)

    Update lock

  • Bjarne Øverli (22 Mar 26)

    Fix dependabot alerts

  • Bjarne Øverli (22 Mar 26)

    Fix rate limiter config drift by recreating instance on settings change

  • Bjarne Øverli (22 Mar 26)

    Add back the auth middleware

  • Bjarne Øverli (22 Mar 26)

    idParamSchema now enforces length and character constraints on route ID parameters

  • Bjarne Øverli (22 Mar 26)

    Set metrics endpoint to 403 if is not configured

  • Bjarne Øverli (22 Mar 26)

    Add CSP header

  • Bjarne Øverli (22 Mar 26)

    Only registered users are allowed to upload files

  • Bjarne Øverli (22 Mar 26)

    Upgrade gh action versions

  • Bjarne Øverli (22 Mar 26)

    Clean the code

  • Bjarne Øverli (22 Mar 26)

    Fix workflows

  • Bjarne Øverli (22 Mar 26)

    Depths update

  • dependabot[bot] (22 Mar 26)

    Bump minimatch from 3.1.3 to 3.1.5 (#498) Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.3 to 3.1.5. - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](https://github.com/isaacs/minimatch/compare/v3.1.3...v3.1.5) --- updated-dependencies: - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  • dependabot[bot] (22 Mar 26)

    Bump flatted from 3.3.3 to 3.4.2 (#509) Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

  • dependabot[bot] (22 Mar 26)

    Bump kysely from 0.28.11 to 0.28.14 (#510) Bumps [kysely](https://github.com/kysely-org/kysely) from 0.28.11 to 0.28.14. - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](https://github.com/kysely-org/kysely/compare/v0.28.11...v0.28.14) --- updated-dependencies: - dependency-name: kysely dependency-version: 0.28.14 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: bjarneo <[email protected]>

  • Bjarne Øverli (22 Mar 26)

    Package update

  • Sascha Buehrle (22 Mar 26)

    fix: use resolveSettings() in getMaxFileSize() for managed mode compatibility (fixes #506) (#507) Co-authored-by: bjarneo <[email protected]>

  • Bjarne Øverli (22 Mar 26)

    Update trivy action

  • bjarneo (09 Mar 26)

    Deduplicate frontend and backend: extract shared components, consolidate validation schemas, and simplify utilities

  • bjarneo (09 Mar 26)

    Remove glows

  • bjarneo (09 Mar 26)

    Reset the secret on click home

  • bjarneo (09 Mar 26)

    Remove gradients

  • bjarneo (09 Mar 26)

    Fix file downloads failing on last secret view by deferring secret deletion to cleanup job and allowing file access when views=0

  • Guillaume (01 Mar 26)

    Improvements for Dutch (#496) Co-authored-by: ltguillaume <[email protected]>

  • bjarneo (01 Mar 26)

    Remove managed hosting link from Footer component Removed the managed hosting link from the footer.

  • bjarneo (01 Mar 26)

    Remove terces.cloud deployment section from README Removed references and links to terces.cloud from the README.

  • Bjarne Øverli (23 Feb 26)

    Update

Hemmelig.app Security

Security Advisories (1)

  • medium Patched CVSS 4.3

    CVE-2025-69206 SSRF Filter bypassed in Secret Request functionality

Hemmelig.app Website

Website

Hemmelig.app - Hemmelig - Share Secrets Securely

Share secrets securely with encrypted messages that automatically self-destruct after being read.

Redirects

Does not redirect

Security Checks

2 security checks failed (63 passed)

  • Domain Recently Created
  • Domain Very Recently Created

Server Details

  • IP Address 89.167.24.75
  • Hostname static.75.24.167.89.clients.your-server.de
  • Location Gunzenhausen, Bayern, Germany, EU
  • ISP Hetzner Online GmbH
  • ASN AS24940

Associated Countries

  • US US
  • DE DE

Safety Score

Website marked as safe

100%

Blacklist Check

hemmelig.app was found on 0 blacklists

  • AntiSocial Blacklist
  • Artists Against 419
  • Badbitcoin
  • Bambenek Consulting
  • CERT Polska
  • CoinBlockerLists
  • CRDF
  • CryptoScamDB
  • EtherAddressLookup
  • EtherScamDB
  • Fake Website Buster
  • MetaMask EthPhishing
  • NABP Not Recommended Sites
  • OpenPhish
  • PetScams
  • PhishFeed
  • PhishFort
  • Phishing.Database
  • PhishStats
  • PhishTank
  • Phishunt
  • RPiList Not Serious
  • Scam.Directory
  • SecureReload Phishing List
  • Spam404
  • StopGunScams
  • Suspicious Hosting IP
  • ThreatFox
  • ThreatLog
  • TweetFeed
  • URLhaus
  • ViriBack C2 Tracker

Website Preview

Website preview

Hemmelig.app Reviews

More Secret Sharing

About the Data: Hemmelig.app

Change History

  • Moved from Security Tools › Online Tools by @Lissy93 #456

API

You can access Hemmelig.app's data programmatically via our API. Simply make a GET request to:

https://api.awesome-privacy.xyz/v1/services/hemmelig-app

The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.

Share Hemmelig.app

Help your friends compare Secret Sharing, and pick privacy-respecting software and services.
Share Hemmelig.app and Awesome Privacy with your network!

View Secret Sharing (3)