Skip to content
Hemmelig.app
Secrets & Credentials
Keep your sensitive information out of chat logs, emails, and more with encrypted secrets.
TypeScript
·
Latest v7.4.8 · 2mo ago
Security brief →
Features
-
Client-side AES-256‑GCM encryption
-
Self‑destructing secrets with configurable expiration and view limits
-
Password protection, IP restrictions, file uploads, QR codes
v7.4.7
Security relevant
·
Breaking changes
- File uploads restricted to registered users only
Security fixes
- Fixed dependabot security alerts
- Added CSP header for XSS protection
- ID parameter validation enforced
Notable features
- CSP header implementation
- Rate limiter dynamic reconfiguration
v7.4.5
Bug fix
·
Notable features
- File access allowed at views=0 for downloads
v7.4.4
Maintenance
·
Improved Dutch localization and removed outdated managed hosting references from documentation.
v7.4.3
Security relevant
·
Security fixes
- Constant-time comparison prevents timing attacks
- Buffer padding for cryptographic operations
Notable features
- OAuth in Helm Chart
- Constant-time comparison for buffers
- Startup warning for default HMAC
cli-v1.0.2
New feature
·
Notable features
- Cross-platform CLI support
- Self-destructing encrypted secrets
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
About
Languages
TypeScript
·
JavaScript
·
Go
TypeScript
Types included ✓
View on GitHub
View on npm
Homepage
Live demo
Install & Platforms
Install via
docker
shell-script
npm
Search tools, categories, lists, and users
Use ↑↓ to navigate, Enter to open, Esc to close
No results for ""
⌘K to open
↑↓ navigate
⏎ open