Password Pusher

Password Pusher is an open-source web application designed for the secure sharing of sensitive information. It allows users to upload passwords, text notes, files, or URLs, which are then converted into a one-time link for the recipient. These links are configured to expire automatically based on a set number of views or a specific time limit, ensuring that sensitive data is removed from the system entirely once it is no longer needed.

The software is deployed as a self-hosted server, commonly run via Docker, Kubernetes, or various cloud platforms. It can operate with a database for persistent storage or in a stateless, ephemeral mode. Users interact with the system through a web browser, though it also provides a JSON API and a command-line interface for automated workflows, allowing for integration into existing technical pipelines.

Key features

• Encryption of sensitive data at rest with automatic deletion upon expiry
• Expiry controls based on view count, time limits, and optional passphrases
• Two-factor authentication using TOTP and backup codes
• Audit logging to track when links were created and viewed
• Unbranded delivery pages to prevent recipient confusion
• White-label customization including custom logos, themes, and CSS
• JSON API v2 for creating, retrieving, and auditing pushes
• Support for 31 different languages in the user interface

Written in Ruby, the application is built for teams and individuals who need a verifiable audit trail of secret sharing. It integrates with a dedicated CLI and a Chrome extension to facilitate pushing secrets directly from the terminal or browser. The architecture supports automatic SSL/TLS configuration through Docker Compose, making it suitable for production environments in IT and network security contexts. Administrators can manage the instance through a built-in dashboard, where they can enforce instance-wide MFA requirements to increase security.

Password Pusher serves as a secure utility for transmitting temporary credentials and private files without relying on insecure channels like email or chat. It is positioned as a tool for those who require full control over their data residency and audit logs.