onetimesecret VS age

You could create your own too! It's open sourced https://github.com/onetimesecret/onetimesecret

I'd consider PrivNote fine or OneTimeSecret.com. OTS also provides its source, so you could run your own version in-house if you want more control over it.

We introduced https://github.com/onetimesecret/onetimesecret at my former workplace, I can only recommend this style of password sharing to anyone.

You may also consider https://github.com/onetimesecret/onetimesecret API. It's easy to use it to generate and email a temporary link to credentials for this purpose.

You can run your own onetimesecret, it's MIT licensed and source on Github.

We installed it on our own infra https://github.com/onetimesecret/onetimesecret

I thought this would be simple, but how do you safely share passwords with normal users online. Services like 1Password require that you create a guest user with a vault. I'd like to use something that is SOC2 compliant. And it seems like if I wanted to use something like OneTimeSecret https://github.com/onetimesecret/onetimesecret I'd have to host it myself to be sure it was safe. What do you guys use?

I usually use https://onetimesecret.com/ for sharing secrets. Its code is also on github, so you can install it in your own environment, too, if you don't trust the author.

https://github.com/onetimesecret/onetimesecret

age

and echoing the result after converting to an age private key

I like that https://github.com/FiloSottile/age has small public keys.

> something fresh

It exists, it's called age..

Some random links

https://github.com/FiloSottile/age

https://www.reddit.com/r/crypto/comments/hr64hr/state_of_age...

https://github.com/FiloSottile/age/discussions/432

> (Acquiring keys, rotating keys, identifying compromised keys, and most importantly either reaches a large enough percentage of emails..

Oh nevermind, age doesn't do any of that. Indeed, it doesn't even do email https://github.com/FiloSottile/age/issues/93

Encrypted secrets thanks to SOPS and Age

I never heard of "Age" before this post. Thank you to share. If others are interested to learn more, here are two other interesting posts about Age:

https://github.com/FiloSottile/age/discussions/432

https://words.filippo.io/dispatches/age-authentication/

of all things I was able to resolve the issue via this github issue: https://github.com/FiloSottile/age/issues/370#issuecomment-1...

Why keep something secret on a public repo? Is that not an oxymoron?

Also, I’m terms of encryption something like age[0] makes it much easier to not shoot yourself in the foot.

[0] https://github.com/FiloSottile/age

Why RSA specifically? For backups, I recommend Tarsnap. But if you really don't want to pay for encrypted cloud hosting, then check out age encryption.