Hemmelig

Hemmelig is an encrypted secret-sharing service designed to keep sensitive information out of chat logs and email threads. It uses a zero-knowledge approach where encryption happens in the browser, and the server only stores encrypted data.

Key Features

• Client-side AES-256-GCM encryption (zero-knowledge storage)
• Self-destructing secrets with configurable expiration and view limits
• Optional password protection for an additional security layer
• IP restrictions to limit access to specific IP ranges
• Encrypted file uploads for authenticated users
• Rich text editor for formatting secrets
• QR codes for easier sharing on mobile devices
• Webhook notifications for secret viewed/burned events
• REST API with OpenAPI specification, plus CLI for automation

Use Cases

• Securely sharing one-time credentials, API keys, and recovery codes
• Exchanging sensitive notes or documents with expiring access
• Automating secret creation and sharing in CI/CD pipelines via CLI/API

Limitations and Considerations

• The license is a modified MIT-style license that restricts offering the software as a competing hosted SaaS

Hemmelig is a practical alternative to sending secrets through persistent channels, combining strong client-side cryptography with expiration controls. It fits well for teams and individuals who need simple, auditable secret handoff workflows with optional automation.