Self-host crypt.fyi
@crypt.fyi/core@0.0.20Zero-knowledge secret sharing with post-quantum encryption
- Stars
- 144
- Ports
- 3000 (API server (container default)), 4321 (API server (configured default)), 80 (Web server (nginx))
- Requires
- Redis
What is crypt.fyi?
crypt.fyi lets you share sensitive information securely. The service encrypts secrets in your browser using ML-KEM post-quantum cryptography before they ever reach the server, so the operator never sees plaintext or keys. Secrets can be set to burn after a single read, after a number of failed attempts, or when a time-to-live expires. Optional password protection, file uploads, IP allow-lists, read limits, and webhook notifications are built in. A CLI and Chrome extension provide alternative ways to create and retrieve secrets. The stack runs as an API server, a static web front end served by nginx, and Redis for ephemeral storage. You can deploy it yourself with Docker Compose or the provided Railway template.
Should you self-host crypt.fyi?
crypt.fyi scores 41/100 on selfhost.directory (how scoring works) and ranks #64 of 78 in Security. It has 144 GitHub stars.
It shipped 11 stable releases in the past year. The latest, @crypt.fyi/core@0.0.20, came out on 10 August 2026.
Setup is moderate: expect some configuration beyond a single command. It is Apache-2.0-licensed and written mostly in Typescript.
Its closest alternative on selfhost.directory is pentagi (83/100, 32 629 stars). It scores higher overall, so compare the two before you pick. See crypt.fyi vs pentagi side by side.
Features
- Automatic expiration (TTL)
- Burn after N read failures
- Burn-after-reading
- Chrome Extension
- CLI
- End-to-end encryption
- File sharing
- Internationalization
- IP/CIDR allow-listing
- Password Protection
- QR Code Generation
- Read count limits
- Strict Content Security Policy
- Webhook Notifications
- Zero-knowledge architecture
crypt.fyi README
More in File Sharing
deltaDelta is a self-hosted Node.js file uploader and URL shortener. Upload via curl, get short URLs with custom slugs, passwords, expiry, and multi-user support.
Directory ListerSelf-hosted, open-source PHP web directory lister for public folders, with file search, zip downloads, README rendering, file hashes and light/dark themes.
docker-webdavSelf-hosted Docker image running an Apache WebDAV server with Basic/Digest auth, multi-user password files and optional SSL.
dragonflyOpen-source, self-hosted P2P download acceleration and file distribution for cloud-native stacks, with a Helm-based deployment and an optional Manager web console.
DropgateSelf-hosted file sharing with hosted uploads, P2P transfers, E2EE, web UI, desktop client, and TypeScript library.
dtan-serverDTAN Server is a self-hosted, open-source torrent index using Nostr protocol for decentralized metadata and BitTorrent DHT for peer discovery.
DufsSelf-hosted Rust file server that shares folders over HTTP or WebDAV with drag-drop uploads, search, per-path access control and HTTPS. Open-source.
DumbDropDumbDrop is a self-hosted, open-source file upload app with drag-and-drop UI, optional PIN protection, dark mode, and Apprise notifications. Run via Docker or Node.js.
erfanzadeh.irA self-hosted, open-source file sharing server in Go with drag-and-drop uploads, auto-eviction at 10 GB, and download tracking — no accounts needed.
ErugoErugo is an open-source, self-hosted file sharing platform with memorable URLs, password protection, expiration dates, download limits, and a customizable dashboard.
ferrishareSelf-hosted file sharing with browser-side encryption so the server never sees content. Single container with SQLite, admin panel, rate limiting, configurable expiration.
fertilizerA self-hosted, open-source utility that creates cross-seed torrents for Redacted and Orpheus, with optional automatic injection into torrent clients.
0 comments