Yopass

Yopass is a self-hosted web application designed for the secure sharing of secrets, passwords, and files. It employs end-to-end encryption to ensure that all sensitive data is encrypted directly in the browser using OpenPGP before transmission to the server. This architecture ensures that the decryption key remains on the sender's machine and is never stored or seen by the server administrator.

The software is deployed as a server and accessed by users via a web browser. It generates a unique, one-time URL for each secret, which expires automatically once the recipient has accessed the information. This workflow removes the need for permanent plaintext storage and eliminates the risks associated with sharing credentials through email, ticket systems, or chat platforms. It is intended for users who require a temporary, secure channel for transmitting sensitive data without the overhead of user account management.

Key features

• End-to-end encryption using OpenPGP
• One-time secret viewing with automatic expiration
• Configurable expiration periods in hours, days, or weeks
• File upload support with streaming encryption
• Optional custom password protection for secrets
• OpenID Connect authentication with email domain restrictions
• Compliance audit logging for SOC 2, ISO 27001, and GDPR
• Read receipts to notify when a secret is opened
• Webhooks for secret creation, viewing, and expiration events

Administrators can deploy Yopass using Docker, Docker Compose, or Kubernetes. The application supports Memcached or Redis as storage backends and can integrate with local disk or S3/MinIO for file storage. For increased security, the server supports optional memory-hard Argon2id password key derivation, which requires specific Content-Security-Policy directives. The system also includes Prometheus metrics for monitoring and supports multi-language translations via react-i18next. Theming and branding options allow for custom logos and application names to match organizational identity.

Yopass serves as a secure utility for organizations and individuals to handle temporary secret transfers.