Browser-encrypted secrets: meet the OTI one-time sharing app
A developer has released OTI, an open-source one-time secret sharing app that encrypts messages or small text files in the browser before they reach the server. Once the link is opened, the secret is displayed once and then deleted, preventing accidental leaks from chat previews or repeated access. The project was built to explore AdonisJS 6 and browser-side encryption, and it ships with extras like QR sharing, password protection, 100 KB file support, and an expiry timer.
Built for privacy, not just learning
OTI stores only encrypted blobs on the server; the decryption key lives in the shareable link itself. A recent update added a confirmation step before revealing a secret, so previews or bots don’t trigger premature decryption. Even small details like a countdown timer and a creator receipt page aim to make the experience safer and more transparent. The stack runs on AdonisJS 6, TypeScript, MySQL, Redis, Edge templating, and Vite, with the code released under the permissive MIT license.
Open source with caveats
The project is intentionally lightweight and has not undergone a professional security audit. While the browser-side encryption and one-time access model reduce exposure, users should treat it as a practical tool rather than a formally verified solution. The developer emphasizes that they wrote key parts themselves, used AI assistants only for support tasks, and invites community feedback.
Why it matters
For teams or individuals who occasionally need to transmit sensitive snippets or small files without long-term storage, OTI offers a zero-config option that keeps raw data off the server. Its design highlights how browser encryption can shrink the trust surface when sharing secrets. Still, those with strict compliance needs should seek audited alternatives, as the project’s simplicity comes with inherent limitations.
Try the demo View the code on GitHub
Source: DEV Community. AI-assisted editorial synthesis — TechnoExpress.