One Time Secret

One Time Secret is an open-source application that enables the secure sharing of sensitive data through single-use URLs. It prevents passwords and confidential information from persisting in chat logs or email inboxes by ensuring that the content is deleted immediately after the intended recipient accesses the link. This mechanism ensures that sensitive data does not remain stored in plain text across multiple communication platforms or server backups.

The software provides two primary authentication modes to suit different security requirements. Simple mode relies on Redis for basic functionality and rapid setup. Full mode supports a SQL database and introduces advanced security features including multi-factor authentication and WebAuthn for identity verification. The system can be configured with various email providers such as SMTP, SES, or SendGrid to notify recipients automatically when a secret is available for retrieval.

Installation is available via Docker for rapid deployment using containers, or through a manual bare-metal setup requiring Ruby, Redis, and Node.js for building the frontend. For production environments, the application supports reverse proxy configurations and production hardening to ensure stability and security. The system is managed through a configuration file where users can customize the user experience and define essential settings for authentication and notification delivery.

It is designed for users and organizations that need to transmit temporary credentials, private keys, or other confidential strings without leaving a permanent digital trail. The tool focuses on the specific use case of ephemeral data transfer where the information is only needed once and should not be archived.