sup3rS3cretMes5age
Self-destructing one-time message service backed by HashiCorp Vault
sup3rS3cretMes5age is a small web service for sharing secrets via single-use, self-destructing messages. It uses HashiCorp Vault as the storage backend so messages are handled as secrets rather than being persisted in an app database.
Key Features
- One-time secret messages that self-destruct after being read
- HashiCorp Vault backend for storing and managing secrets
- Lightweight web UI built with vanilla JavaScript and self-hosted assets (no external CDNs)
- Supports HTTPS operation, including optional automatic certificate provisioning
- Container-friendly deployment with Docker and docker-compose
- CLI-oriented usage patterns for easy scripting and automation
Use Cases
- Sharing passwords, tokens, or recovery codes securely with teammates
- Sending short-lived secrets during incident response or support workflows
- Providing single-use credentials or links in automated scripts
Limitations and Considerations
- Requires operating and securing a HashiCorp Vault instance and providing appropriate tokens/policies
- If deployed without TLS end-to-end, secrets can be exposed in transit
sup3rS3cretMes5age is a practical tool for teams that need a simple, auditable way to share secrets once and avoid leaving sensitive data sitting in chat logs or email threads. It fits well in environments that already use Vault for secrets management.
Categories:
Tags:
Tech Stack:
JavaScript
Go
DockerSimilar Services
Vaultwarden
Bitwarden-compatible password manager server written in Rust
Vaultwarden is a lightweight, Bitwarden-compatible password manager server in Rust, designed for self-hosting with official Bitwarden clients.
KeePassXC
Cross-platform offline password manager using encrypted KDBX databases
KeePassXC is a secure, cross-platform password manager that stores credentials and sensitive notes in encrypted KeePass-compatible KDBX files with autofill and browser in...
Infisical
Open-source platform for secrets, PKI certificates, and privileged access
Infisical is an open-source platform to manage and deliver app secrets, certificates (PKI), SSH credentials, and encryption keys across teams and infrastructure.
Ente
End-to-end encrypted cloud for photos and 2FA
Open-source, end-to-end encrypted platform for private photo backup, sharing, and authenticator (2FA) sync across devices, with optional self-hosting.
Bitwarden
Open-source password manager with zero-knowledge security and self-hosting.
Bitwarden is an open-source password manager that stores, shares, and autofills credentials with zero-knowledge encryption; supports cloud or self-hosted deployments.
Passbolt
Open-source password and secret manager for teams
Passbolt is an open-source, security-first password and secret manager for teams, with end-to-end encryption, granular sharing permissions, and auditing.
