pglombardo/PasswordPusher

Features

• Encrypted File Sharing - Provides the core capability of creating encrypted, self-destructing links for sharing sensitive text.
• Self-Destructing Payloads - Creates encrypted secrets that are entirely deleted after a specified duration or number of views.
• Secure Secret Sharing - Shares sensitive text, files, or passwords via encrypted links that automatically expire.
• Pluggable Object Storage - Supports flexible data persistence via local storage, Amazon S3, and Azure Blob Storage.
• Pluggable Database Backends - Supports switching between SQLite and PostgreSQL for storing encrypted payloads based on deployment scale.
• Record Deletion - Permanently removes sensitive records and files automatically based on time limits or view counts.
• Secure Secret Distribution - Exposes a stateless REST interface for the secure distribution and expiration of encrypted links.
• Self-Hosted Deployments - Can be installed on private infrastructure using Docker, Kubernetes, or various cloud platforms.
• RESTful Lifecycle Management - Offers a RESTful interface to manage the full lifecycle of encrypted secret pushes within external workflows.
• Encrypted Secret Sharing - Implements secure distribution of credentials and encrypted files to external parties via a CLI and API.
• AES-GCM Data Encryptors - Uses AES-GCM authenticated encryption to secure sensitive data at rest with unique keys.
• Transit and At-Rest Encryption - Encrypts database records at rest using AES-GCM with unique per-field keys.
• Self-Hosted Vaults - Allows deploying and administering a private instance for storing and distributing secrets on internal infrastructure.
• Self-Destructing Sharing - Creates encrypted, self-destructing links for sharing sensitive text and files.
• View-Count and Time Expirations - Automatically deletes encrypted records and files once a specific time limit or view count is reached.
• Encrypted File Sharing Platforms - Provides a private infrastructure for distributing encrypted files stored on local disk, S3, or Azure Blob.
• TOTP Authentication Systems - Requires time-based one-time passwords (TOTP) to provide a second layer of security during sign-in.
• Pluggable Storage Backends - Provides an abstraction layer to store encrypted files on local disk, S3, Google Cloud, or Azure Blob Storage.
• Programmatic Secret Distribution - Provides a RESTful API and CLI for the automated distribution of secrets within external scripts.
• Containerized Production Setups - Provides Docker Compose configurations with automated SSL/TLS certificate provisioning for production instances.
• Custom Domain Mapping - Maps the application to a unique organizational domain to improve trust and brand recognition.
• Access Control - Controls whether secret link creation requires authentication or allows anonymous access.
• Bearer Token Authentication - Secures programmatic API access to secret management using bearer tokens in HTTP headers.
• RESTful Secret Management APIs - Provides a RESTful interface to create, retrieve, and expire encrypted secret pushes.
• Workspace Security Policies - Enforces mandatory expiration limits and passphrase requirements across shared team workspaces.
• Multi-Factor Authentication - Supports multi-factor authentication via TOTP codes from authenticator apps to enhance account security.
• Link Protection - Adds an optional password layer to shared links for security beyond the unique URL.
• Secure Link Dispatchers - Emails secure, encrypted links directly to recipients on behalf of the sender.
• Single Sign-On Integrations - Integrates with external identity providers to enable centralized single sign-on authentication.
• Database-Agnostic Frameworks - Decouples application logic from the database, allowing users to switch between SQLite and PostgreSQL.
• Administrative Dashboards - Provides a web-based dashboard for managing system configurations, pushes, and user data.
• Secret Access Auditing - Tracks and logs the access history of shared secrets to maintain a security audit trail.
• Branding Customization - Allows uploading custom logos and modifying visual elements to align the interface with corporate identity.
• Sharing Revocations - Allows immediate manual deletion of shared links to revoke access before the expiration limit.
• White Labeling - Customizes the look, feel, and domain of the service to align with an organization's professional brand identity.
• White-Label Security Gateways - Provides a customizable interface for organizations to share secrets under their own domain and branding.
• JSON APIs - Provides a JSON-based API for programmatically pushing sensitive data into secure sharing workflows.
• Open Source Applications - Secure password delivery and sharing tool.

Star history