v1.0.0

Initial Release

Zero-knowledge, one-time secret sharing powered by Cloudflare Workers.

Features

• Client-side AES-256-GCM encryption -- secrets are encrypted in the browser before storage. The server never sees decryption keys.
• Burn-before-return -- non-password notes are deleted from KV before the response is sent.
• Password protection -- optional second factor via PBKDF2-SHA-256 (600,000 iterations) with 3 decryption attempts before auto-burn.
• Configurable TTL -- 1 hour, 24 hours, 1 week (default), or 30 days with KV native expiration.
• API-first -- JSON API with OpenAPI 3.1 docs via Scalar at /api/docs.
• POST / alias -- curl -d '{"c":"...","iv":"..."}' https://secure.gremlin.group/ for easy scripting.
• CLI tools -- POSIX shell script and Rust binary for scripted secret creation.
• Gremlin-branded dark UI -- create and reveal pages with inline Hono JSX.

CLI

Download gremlin-secret.sh or the Rust binary for your platform from the assets below.

echo "my-secret" | ./gremlin-secret.sh
echo "my-secret" | gremlin-secret --password