jhaals/yopass

Features

• Client-Side Encryption - Encrypts sensitive data in the browser before transmission to ensure the server never sees plain text.
• Encrypted File Sharing - Enables secure sharing of encrypted files via temporary, randomly generated links.
• Secure Secret Sharing - Provides a secure platform for sharing encrypted text and files via one-time expiring links.
• Pluggable Object Storage - Abstracts encrypted file persistence across local disks and S3-compatible cloud storage.
• Email Domain Restrictions - Filters application access based on email domain patterns via OIDC integration.
• OIDC & Basic Auth Access Control - Enforces identity-based access restrictions for secret creation using OpenID Connect authentication.
• Encrypted Cloud Storage - Manages the storage of sensitive files as encrypted blobs in cloud or local backends with automatic expiration.
• Encrypted Secret Sharing - Provides secure distribution of credentials and encrypted text through browser-side encryption and one-time links.
• Identity Authentication - Requires authentication through a single sign-on provider to permit secret sharing.
• User Identity Verification - Verifies user identities via external providers before granting access to application functions.
• OIDC Identity Integrations - Manages user authentication and access control through an external OpenID Connect provider.
• OpenID Connect Support - Implements the OpenID Connect protocol for user authentication and domain-based access control.
• Storage Encryption - Saves sensitive files as encrypted blobs at rest on local disks or object storage to ensure data privacy.
• Secret Access Auditing - Maintains a permanent audit trail of secret requests and access history while ensuring content remains encrypted.
• View-Count and Time Expirations - Automatically purges secrets and files based on time-to-live (TTL) or view count limits.
• Auditing and Logging - Maintains structured audit logs to track when and by whom encrypted data was accessed.
• Lifecycle Event Triggers - Triggers signed webhooks and notifications whenever secrets are created, accessed, or expired.
• Authenticated Secret Creation - Restricts secret creation to authenticated users from approved email domains.
• Configurable Storage Backends - Supports switching between local disk, S3-compatible buckets, or databases for storing encrypted files.
• Webhook Triggers - Triggers automated HTTP requests to external services when specific application events occur.
• Security Access Alerts - Provides immediate email or webhook notifications when a recipient accesses a one-time secret link.
• Signed Webhook Deliveries - Attaches cryptographic signatures to outgoing webhooks to verify sender identity.
• Access Request Management - Provides interfaces for tracking pending access requests and revoking active sharing links.
• Structured JSON Logging - Writes security and access events to structured NDJSON files for compliance auditing.
• RESTful Secret Management APIs - Provides a REST API to programmatically create and monitor the lifecycle of encrypted secrets.
• Lifecycle Notifications - Sends real-time HTTP notifications when secrets are created, viewed, or expired.
• Audit Logs - Produces structured NDJSON audit logs to satisfy regulatory requirements and track security activities.
• Secret Storage - Utilizes key-value stores or memory caches to persist the encrypted metadata associated with shared secrets.
• Inbound Secret Collection - Allows collecting encrypted credentials from third parties through secure upload links without requiring user accounts.
• Security Automation Integrations - Integrates secret access and creation events into external security automation pipelines.
• Signed Event Notifications - Generates structured NDJSON audit logs and triggers cryptographically signed HTTP notifications upon secret access.
• Security Audit Logs - Generates structured audit logs to track administrative activities and security-critical events.
• Communication Systems - Secure sharing for secrets, passwords, and files.

Star history