Skip to content
Securely share data
HTML CSS JavaScript
Branch: master
Clone or download

Latest commit

Fetching latest commit…
Cannot retrieve the latest commit at this time.

Files

Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
public
rules
views
.env.sample use hex for keys instead of base64 Feb 18, 2015
.gitignore
LICENSE
README.md
app.js
app.json
iisnode.yml increase request size limit Jan 11, 2015
logger.js
package-lock.json
package.json
server.js
web.config

README.md

Sharelock: securely share data

Sharelock is an open source web service hosted at https://sharelock.io. It lets you simply and securely share secret information with people you trust. You can also host your own version of Sharelock since the server and the apps are all open source.

Apps

Host your own Sharelock server

Deploy

The https://sharelock.io service controls signing and encryption keys that protect your secret data. If you want to be in control of signing and encryption keys, you must host your own version of the Sharelock service. The apps have support to change the endpoint you hit

Read more about how it works and things like key rotation.

Security

  • Urls are ephemeral, they are NOT stored anywhere (neither your secrets). The content you share lives encrypted in the URL.
  • The decrypted content can ONLY be accessed by the people that you shared the data with by means of login and email verification (as opposed to, let's say, Dropbox links which can be accessed by anyone who has the link).
  • Secrets are signed with HMAC SHA256 and encrypted with AES 256 CTR using keys that live on the Sharelock server
  • We host sharelock.io public pro bono but we are not in the business of holding your secret content, that's why we built this OSS. If you want to have your own signing key and encryption key you can do that by deploying your own Sharelock instance to Heroku in seconds (or any other hosting that provides nodejs support)

Motivation

Our story is simple. We created Sharelock because we wanted a way to share secret data securely. We’re constantly exchanging bits of confidential information and, because we take security very seriously, we didn’t feel comfortable sharing that information through normal channels like email or chat. So, Sharelock was born. It provides you with a simple and secure way to share secrets with people you know.

Feedback

We welcome feedback and collaboration. You know where to file issues and how to submit pull requests. You can contact us here.

This project is licensed under MIT.

Crafted by Auth0

You can’t perform that action at this time.