Hemmelig — Self-Hosted, Open-Source

Share encrypted secrets cross organizations, or as private persons.

License: MIT. Built with: TypeScript, JavaScript, Go, Dockerfile, HTML, CSS, Shell, Go Template. Website: https://hemmelig.app. Source: https://github.com/HemmeligOrg/Hemmelig.app.

Features

Client-side AES-256-GCM encryption - Your data is encrypted before leaving your browser
Self-destructing secrets - Configurable expiration and view limits
Password protection - Optional additional security layer
IP restrictions - Limit access to specific IP ranges
File uploads - Share encrypted files (authenticated users)
Rich text editor - Format your secrets with styling
QR codes - Easy mobile sharing
Multi-language support - Available in multiple languages
Webhook notifications - Get notified when secrets are viewed or burned (docs)

Installation

docker run -d \ --name hemmelig \ -p 3000:3000 \ -v hemmelig-data:/app/database \ -v hemmelig-uploads:/app/uploads \ -e DATABASE_URL="file:/app/database/hemmelig.db" \ -e BETTER_AUTH_SECRET="$(openssl rand -base64 32)" \ -e BETTER_AUTH_URL="https://your-domain.com" \ hemmelig/hemmelig:v7

Why self-host Hemmelig

Self-hosting gives you three things SaaS can’t: data ownership (the files live on disks you control), cost predictability (a one-time setup vs. recurring per-seat fees that grow with your household or team), and longevity (open-source means the app keeps working even if the maintainers move on, since you can pin a working version). The trade-off is that you take on the operational work of running a server, applying updates, and handling backups.

Hardware notes

curl -L https://github.com/HemmeligOrg/Hemmelig.app/releases/download/cli-v1.0.1/hemmelig-linux-amd64 -o hemmelig

Where to go from here

Last verified: 2026-05-22