Yopass alternative.
Yopass is an open-source service for sharing secrets with client-side encryption, one-time viewing, and optional passphrases. Khamli is a no-account alternative that adds file sharing and a simple 4-character code.
What Yopass is
Yopass is a free, open-source secret-sharing service. It encrypts your message in the browser before sending it to the server, so the server only stores ciphertext. It supports one-time viewing, expiration, and an optional passphrase for the recipient.
Who uses it: Privacy-conscious users and organizations that want to share secrets — passwords, tokens, or confidential notes — without leaving them in email or chat. It is also popular as a self-hosted tool for teams.
How it works
You enter a secret, optionally set a passphrase and expiration, and create it. The secret is encrypted client-side, and only ciphertext is sent to the server. The recipient needs the full link (with the decryption key in the URL) to read the secret, which is typically burned after a single view.
Advantages
- Client-side encryption — the server stores only encrypted data.
- Open source and self-hostable.
- No account required.
- Supports one-time viewing, expiration, and passphrases.
Limitations
- Text/secrets only — no file sharing.
- The decryption key travels in the URL fragment, so sharing the link insecurely weakens the protection.
- Self-hosting requires server administration.
- Public instances vary in trustworthiness and retention.
At a glance
- Privacy model
- Strong. Yopass encrypts content in the browser (zero-knowledge) and deletes it after one view or expiration. Self-hosting gives full control over logs and retention.
- Signup requirements
- No account required.
- Expiration behavior
- Configurable — typically one-time view plus a time-to-live for unread secrets.
- File & text support
- Text and secrets only. Files are not supported.
How Khamli compares
Yopass and Khamli both target private, temporary text sharing. Yopass is the stronger privacy option thanks to client-side zero-knowledge encryption and one-time viewing. Khamli is simpler and broader: a managed service with a 4-character code that is easy to read aloud, file sharing up to 500 MB, and time-based expiry — but it stores plaintext server-side until deletion.
When Khamli is the better choice
Choose Khamli when you want zero setup, need to share files or images, or prefer a short code over a long link — and don't require zero-knowledge encryption.
When Yopass may be the better choice
Yopass may be better when you need strong zero-knowledge encryption for a sensitive secret, want one-time viewing, or prefer to self-host.
Frequently asked questions
Is Yopass encrypted?+
Yes — Yopass encrypts your secret in the browser and only sends ciphertext to the server, so it is a zero-knowledge design.
Can Yopass share files?+
No, Yopass is for text secrets only. Khamli supports files up to 500 MB.
How is Khamli different from Yopass?+
Khamli adds file sharing and uses a 4-character code, but does not provide Yopass's client-side zero-knowledge encryption. Khamli stores content server-side until its timer expires.
Do I need to host Yopass myself?+
You can use a public instance or self-host. Self-hosting gives full control but requires server administration.
Try Khamli — no account, self-destructs on expiry.
Share with Khamli