Privipod

Privipod is a lightweight self-hosted service for sharing secrets and files.

It uses end-to-end encryption - all encryption and decryption happens entirely in your browser, so the server never sees your unencrypted data.

Read the full documentation.

Receive a secret

1. Run Privipod somewhere both of you can access - for example, remotely on a VPS, or locally using ngrok.
2. Create a "pod" - the browser generates a key pair, stores your private key locally, and sends the public key to the server.
3. Share the pod URL with the sender.
4. The sender visits the URL and their browser uses your public key to encrypt their secret, then sends it to the Privipod server.
5. You collect the secret, and the browser uses your private key to decrypt it.

Send a secret

1. Create a send pod with your secret, for another registered user or an anonymous recipient.
2. The browser encrypts the secret with the recipient's public key - their identity key, or a one-off key pair for an anonymous recipient - and sends it to the server.
3. Share the pod URL with the recipient, and for anonymous recipients, send the access code or key file separately.
4. The recipient visits the URL, and their browser decrypts the secret.

Quick start

It's easiest to run with uv and ngrok:

# Start with a temporary database (data lost on shutdown)
uvx privipod

# Use ngrok to share with people outside your network
ngrok http 127.0.0.1:8000

Open http://localhost:8000 in your browser. See the installation docs for more deployment options.

Or you can install it and run it directly:

pip install privipod
privipod
ngrok http 127.0.0.1:8000

And it takes several arguments to customise it:

# Start with a permanent database and specify a username and password
uvx privipod --store=privipod.db --user=admin --pass=changeme 0:7000