Enclosed

Enclosed is an open-source, self-hosted web application for sending encrypted notes and files. It functions as a secure pastebin where content is encrypted on the client side before being sent to the server, ensuring the storage provider has zero knowledge of the data. This architecture prevents the server administrator or any third party with access to the storage from reading the contents of the shared notes.

Users deploy the application on their own server or use a hosted instance to share sensitive information. The software is accessible via a web browser and includes a command-line interface for creating and viewing notes directly from the terminal. It is designed for users who require a minimalist tool for ephemeral, private communication where data persistence is controlled by the sender.

Key features

• End-to-end encryption using AES-GCM with a 256-bit key
• Secure file attachments for sharing documents alongside notes
• Configurable expiration periods and time-to-live settings
• Automatic self-destruction of notes after they are read
• Optional password protection for added security
• Command-line interface for terminal-based note creation
• Responsive design with dark mode and multi-language support
• Optional email and password authentication for note creators

The application is built as a monorepo using SolidJS for the frontend and HonoJS for the backend. It utilizes PBKDF2 with SHA-256 for master key derivation and employs URL hash fragments to pass base keys to recipients. Because hash fragments are not transmitted to the server, the decryption key remains strictly between the sender and the recipient. The system can be deployed quickly using Docker or integrated with Cloudflare Pages and Cloudflare KV for storage. The CLI allows users to pipe file contents directly into a secure note using standard input.

Enclosed is positioned as a minimalist tool for secure, zero-knowledge data sharing.