# FlashPaper

> FlashPaper is a self-hosted, open-source app for sharing secrets via one-time links that self-destruct after viewing. Zero-knowledge AES-256 encryption with local SQLite.

- **Category:** Password Managers
- **Licence:** MIT
- **Latest version:** v2.6.0
- **Open source:** oss
- **Languages:** PHP
- **Platforms:** Docker Compose, Linux
- **Tags:** SQLite, Security, Encryption, Password Sharing, Zero Knowledge, Docker, Php, Private, Aes, Password, Webapp, Aes 256, One time secret, Bcrypt, Self destructing, One time, Secret, Message, Disposable, Ciphertext, Destruct, Destructing

## Description

FlashPaper is a self-hosted web application for securely sharing passwords and other secrets through one-time links. When a user submits a secret, it is encrypted with AES-256-CBC using a unique key that is only included in the retrieval URL. The secret is stored in a local SQLite database and automatically deleted after being viewed once or after a configurable retention period. The project provides a Docker image on ghcr.io, a docker-compose.yml for easy deployment, and a traditional PHP installation method requiring PHP 7.0 or newer with a web server. It includes a simple API for programmatic secret submission returning JSON, customizable UI messages and branding, and automatic pruning of old secrets. No user authentication system exists — it is designed for anonymous, ephemeral secret sharing.

## Links

- [Homepage](https://github.com/AndrewPaglusch/FlashPaper)
- [Website](https://flashpaper.io)
- [Docker](ghcr.io/andrewpaglusch/flashpaper)
- [Demo](https://flashpaper.io)
- [GitHub Repository](https://github.com/AndrewPaglusch/FlashPaper)
- [Docker Image](https://ghcr.io/andrewpaglusch/flashpaper)

---
Source: https://selfhost.directory/project/flashpaper