Hemmelig.app
hemmelig.appShare rich text and files securely with locally encrypted messages that automatically self-destruct, or invite others to send you a secret. Allows setting maximum views, webhooks, expiration times and IP restrictions. Open source and self-hostable.
- Homepage: hemmelig.app
- GitHub: github.com/HemmeligOrg/Hemmelig.app
- Web info: web-check.xyz/check/hemmelig.app
Hemmelig.app Source Code
Author
Description
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
Homepage
https://hemmelig.appLicense
NOASSERTION
Created
13 Jun 21
Last Updated
08 Jul 26
Latest version
Primary Language
TypeScript
Size
31,557 KB
Stars
1,222
Forks
101
Watchers
1,222
Language Usage
Star History
Top Contributors
-
@bjarneo (1039)
-
@dependabot[bot] (33)
-
@ltguillaume (18)
-
@casperklein (7)
-
@luismanson (7)
-
@theonly1me (6)
-
@m4-droid (5)
-
@2franix (3)
-
@loviuz (3)
-
@najeebkp (3)
-
@tryallthethings (3)
-
@zerowhybr (3)
-
@the-voidl (2)
-
@nyable (2)
-
@lucianomilani (2)
-
@jodaAtGithub (2)
-
@hello-woof (2)
-
@PranjalAgni (2)
-
@JosiasKlaus (2)
-
@Copilot (2)
-
@trulow (1)
-
@tholeb (1)
-
@itouakirai (1)
-
@albanobattistella (1)
-
@trivikr (1)
-
@TaneliR (1)
-
@adan89lion (1)
-
@saschabuehrle (1)
-
@Man-in-Black (1)
-
@SankalpaFernando (1)
-
@robertripoll (1)
-
@Rhythmicc (1)
-
@mxmeeple (1)
-
@LukeSearle (1)
-
@joeywas (1)
-
@FRFlo (1)
-
@eloraux (1)
-
@Ajtak (1)
-
@bhattabhi013 (1)
Recent Commits
-
bjarneo (15 May 26)
Add maintainer request to README Added a note about seeking serious maintainers for the project.
-
Bjarne Øverli (23 Mar 26)
Target the entire route
-
Bjarne Øverli (23 Mar 26)
Remove csp from swagger
-
Bjarne Øverli (23 Mar 26)
Update lock
-
Bjarne Øverli (22 Mar 26)
Fix dependabot alerts
-
Bjarne Øverli (22 Mar 26)
Fix rate limiter config drift by recreating instance on settings change
-
Bjarne Øverli (22 Mar 26)
Add back the auth middleware
-
Bjarne Øverli (22 Mar 26)
idParamSchema now enforces length and character constraints on route ID parameters
-
Bjarne Øverli (22 Mar 26)
Set metrics endpoint to 403 if is not configured
-
Bjarne Øverli (22 Mar 26)
Add CSP header
-
Bjarne Øverli (22 Mar 26)
Only registered users are allowed to upload files
-
Bjarne Øverli (22 Mar 26)
Upgrade gh action versions
-
Bjarne Øverli (22 Mar 26)
Clean the code
-
Bjarne Øverli (22 Mar 26)
Fix workflows
-
Bjarne Øverli (22 Mar 26)
Depths update
-
dependabot[bot] (22 Mar 26)
Bump minimatch from 3.1.3 to 3.1.5 (#498) Bumps [minimatch](https://github.com/isaacs/minimatch) from 3.1.3 to 3.1.5. - [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md) - [Commits](https://github.com/isaacs/minimatch/compare/v3.1.3...v3.1.5) --- updated-dependencies: - dependency-name: minimatch dependency-version: 3.1.5 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
dependabot[bot] (22 Mar 26)
Bump flatted from 3.3.3 to 3.4.2 (#509) Bumps [flatted](https://github.com/WebReflection/flatted) from 3.3.3 to 3.4.2. - [Commits](https://github.com/WebReflection/flatted/compare/v3.3.3...v3.4.2) --- updated-dependencies: - dependency-name: flatted dependency-version: 3.4.2 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
-
dependabot[bot] (22 Mar 26)
Bump kysely from 0.28.11 to 0.28.14 (#510) Bumps [kysely](https://github.com/kysely-org/kysely) from 0.28.11 to 0.28.14. - [Release notes](https://github.com/kysely-org/kysely/releases) - [Commits](https://github.com/kysely-org/kysely/compare/v0.28.11...v0.28.14) --- updated-dependencies: - dependency-name: kysely dependency-version: 0.28.14 dependency-type: indirect ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: bjarneo <[email protected]>
-
Bjarne Øverli (22 Mar 26)
Package update
-
Sascha Buehrle (22 Mar 26)
fix: use resolveSettings() in getMaxFileSize() for managed mode compatibility (fixes #506) (#507) Co-authored-by: bjarneo <[email protected]>
-
Bjarne Øverli (22 Mar 26)
Update trivy action
-
bjarneo (09 Mar 26)
Deduplicate frontend and backend: extract shared components, consolidate validation schemas, and simplify utilities
-
bjarneo (09 Mar 26)
Remove glows
-
bjarneo (09 Mar 26)
Reset the secret on click home
-
bjarneo (09 Mar 26)
Remove gradients
-
bjarneo (09 Mar 26)
Fix file downloads failing on last secret view by deferring secret deletion to cleanup job and allowing file access when views=0
-
Guillaume (01 Mar 26)
Improvements for Dutch (#496) Co-authored-by: ltguillaume <[email protected]>
-
bjarneo (01 Mar 26)
Remove managed hosting link from Footer component Removed the managed hosting link from the footer.
-
bjarneo (01 Mar 26)
Remove terces.cloud deployment section from README Removed references and links to terces.cloud from the README.
-
Bjarne Øverli (23 Feb 26)
Update
Hemmelig.app Security
Security Advisories (1)
- medium Patched CVSS 4.3
CVE-2025-69206 SSRF Filter bypassed in Secret Request functionality
Hemmelig.app Website
Website
Hemmelig.app - Hemmelig - Share Secrets Securely
Share secrets securely with encrypted messages that automatically self-destruct after being read.
Redirects
Does not redirect
Security Checks
2 security checks failed (63 passed)
- Domain Recently Created
- Domain Very Recently Created
Server Details
- IP Address 89.167.24.75
- Hostname static.75.24.167.89.clients.your-server.de
- Location Gunzenhausen, Bayern, Germany, EU
- ISP Hetzner Online GmbH
- ASN AS24940
Associated Countries
-
US -
DE
Safety Score
Website marked as safe
100%
Blacklist Check
hemmelig.app was found on 0 blacklists
- AntiSocial Blacklist
- Artists Against 419
- Badbitcoin
- Bambenek Consulting
- CERT Polska
- CoinBlockerLists
- CRDF
- CryptoScamDB
- EtherAddressLookup
- EtherScamDB
- Fake Website Buster
- MetaMask EthPhishing
- NABP Not Recommended Sites
- OpenPhish
- PetScams
- PhishFeed
- PhishFort
- Phishing.Database
- PhishStats
- PhishTank
- Phishunt
- RPiList Not Serious
- Scam.Directory
- SecureReload Phishing List
- Spam404
- StopGunScams
- Suspicious Hosting IP
- ThreatFox
- ThreatLog
- TweetFeed
- URLhaus
- ViriBack C2 Tracker
Website Preview
Hemmelig.app Reviews
More Secret Sharing
-
1time.io - Zero-knowledge one-time secret sharing with AES-256-GCM browser-side encryption, HKDF key derivation, CLI tool, and Docker self-hosting.
-
crypt.fyi is an ephemeral zero-knowledge sensitive data sharing platform with web, cli, and chrome-extension clients. It offers a suite of configurations beyond the standard for comparable private pastebins, including max read count, IP/CIDR allow-listing, and webhooks.
About the Data: Hemmelig.app
Change History
- Moved from Security Tools › Online Tools #456
API
You can access Hemmelig.app's data programmatically via our API. Simply make a GET request to:
https://api.awesome-privacy.xyz/v1/services/hemmelig-app The REST API is free, no-auth and CORS-enabled. To learn more, view the API Docs or read the API Usage Guide.
Share Hemmelig.app
Help your friends compare Secret Sharing, and pick
privacy-respecting software and services.
Share Hemmelig.app and Awesome Privacy with your network!