One Time Secret

Secrets & Credentials

A service for creating self‑destructing one‑time secret links that expire after a single view, keeping sensitive data out of chat logs and emails.

Track releases GitHub Website

Ruby Latest v0.26.2 · 3h ago Security brief →

Features

Generate single‑use URLs that automatically delete after being accessed
Self‑hosted deployment via Docker or bare‑metal Ruby/Node setup
Supports admin account creation without email verification for private instances

Recent releases

View all 41 releases →

Upgrade now

v0.26.2 Breaking risk 3h

Auth Breaking upgrade

Migration + SessionSidecar + CLI routing

Open

v0.26.1 Bug fix 6d

⚠ Upgrade required

If billing is enabled, set env var STRIPE_CHECKOUT_HOST=pay.example.com before/with deploy or boot will fail.

Security fixes

Fix session fixation: sweep stale sessions and reject pre-watermark sessions on password change

Notable features

Config-drive the Stripe custom-domain checkout host allowlist

Full changelog

Deployment Notes

[!WARNING]
If billing is enabled, must set STRIPE_CHECKOUT_HOST=pay.example.com before/with this deploy or boot will fail since it makes stripe links unusable.

See v0.26.0 release - deployment notes

What's Changed

Brand-pack resolution diagnostics (CLI + Colonel) for region-divergence incidents https://github.com/onetimesecret/onetimesecret/pull/3825
chore/readme tidy https://github.com/onetimesecret/onetimesecret/pull/3833
Config-drive the Stripe custom-domain checkout host allowlist (#3821) * https://github.com/onetimesecret/onetimesecret/pull/3823
Fix Current badge landing on wrong plan card (#3824) https://github.com/onetimesecret/onetimesecret/pull/3827
Fix session fixation: sweep stale sessions and reject pre-watermark sessions on password change https://github.com/onetimesecret/onetimesecret/pull/3830
Wire receipt status UI to #3633 access telemetry https://github.com/onetimesecret/onetimesecret/pull/3832

Dependencies

Bump axios from 1.16.0 to 1.18.0 in the npm_and_yarn group across 1 directory by @dependabot[bot] in https://github.com/onetimesecret/onetimesecret/pull/3826
Update dependency brace-expansion to v1.1.16 [SECURITY] by @renovate[bot] in https://github.com/onetimesecret/onetimesecret/pull/3828

Full Changelog: https://github.com/onetimesecret/onetimesecret/compare/v0.26.0...v0.26.1

View release on GitHub

Config change

v0.26.0 Breaking risk 7d

Auth Breaking upgrade

Routine maintenance and dependency updates.

Open

Config change

v0.26.0-rc1 Breaking risk 21d

Auth

ENV var + YAML hardening + i18n + branding +

Open