Stop Sending
Passwords
API keys
Secrets
Files
Credentials
Tokens
Recovery codes
2FA codes
Documents
Links
SSH keys
Over Email & Chat
Share passwords, files, and secrets with expiring links—so sensitive data does not sit forever in email and chat logs.
Password Pusher Pro adds teams, branding, and SaaS hosting by Apnotic—with optional self-hosted Pro for your infrastructure. The same workflow has been trusted since 2011; the community edition remains open source on GitHub.
No credit card to start • Open source edition on GitHub • Documentation at docs.pwpush.com
- Encrypted at rest
- Self-deleting links
- US and EU hosted regions
- Full audit trail for access and compliance
For security teams and for people who just need it done today
Security, compliance, and IT leadership
Meet audit expectations with visibility into access, retention controls, and data residency choices—without rolling your own secret-sharing stack.
Support, developers, and daily operations
Replace pasted credentials in tickets and chat with one link that expires on its own—same tools your team already uses, less cleanup afterward.
Create a link in seconds
Set what to share, how long it lives, and how many times it can be opened—then send a short URL instead of the secret itself.
Why teams choose Password Pusher
Move sensitive handoffs out of inboxes and chat history without changing how people work.
The risky way
- Secrets linger in email, instant messages, and ticket systems.
- Backups and search indexes can retain data you thought was gone.
- Hard to see who opened what, or revoke incomplete transfers.
The Password Pusher way
- Encrypted payloads at rest; expirations by views, time, or both.
- Optional passphrase, QR codes, access notifications, and pre-emptive expiry.
- Audit trail when links are opened—available in every edition.
- Pro adds team policies, dashboards, and organization-wide controls.
Two ways to share sensitive data
Push secrets out or request them in — both workflows use encrypted, self-deleting links.
Pushes — send secrets out
Create encrypted, one-time links for passwords, files, URLs, or QR codes. Set view limits and time-based expiration — then share the link through any channel.
- Text, files up to 4 GB, URLs, and QR payloads
- Optional passphrase for an extra layer of protection
- No account required for recipients
Requests — collect secrets in
Generate a branded upload link and send it to a client, colleague, or vendor. They submit text or files through a secure form — you get notified and retrieve the data.
- White-labeled forms with your branding and domain
- Email notification when a response arrives
- Data auto-deletes after expiration
Three steps to safer sharing
Create
Add the secret, set view and time limits, and optional passphrase protection.
Share
Send the short link through your existing channels—email, chat, SMS, or support tickets.
Expire
Password Pusher deletes the ciphertext once limits are hit, reducing long-term exposure.
JSON API for automation
Create pushes and requests programmatically from CI/CD pipelines, chat bots, ticketing systems, or any tool that speaks HTTP. The full REST API is included in every edition — open source, hosted, and self-hosted Pro.
Create a push via the API
curl -X POST https://eu.pwpush.com/api/v2/pushes \
-H "Authorization: Bearer YOUR_API_TOKEN" \
-H "Content-Type: application/json" \
-d '{"push": {
"payload": "s3cret-p4ssword",
"expire_after_days": 3,
"expire_after_views": 5
}}'Deploy your way
Same core idea everywhere: expiring links instead of copying secrets into messages. Pick the deployment that fits your team.
Hosted at pwpush.com
Multi-region SaaS with automatic updates. Free tier included — upgrade when you need teams, branding, or requests.
Create an accountSelf-Hosted Pro
Full Pro feature set on your infrastructure with a license key — ideal for regulated environments and air-gapped networks.
Self-hosted Pro pricingOpen source edition
Community edition on GitHub — fork it, inspect the code, or deploy via Docker. Pro subscriptions fund its ongoing development.
Security & privacy highlights
Encrypted storage
Secrets are encrypted at rest; decryption happens only when a recipient opens a valid link.
US & EU regions
Pick the hosted region that matches your data residency requirements.
Documentation & DPA
Read architecture and operations guides on docs.pwpush.com. Hosted customers can review our data processing agreement.
Ready for safer secret handoffs?
Start free on hosted Pro, try a push without signing up, or read the docs—your choice.