{"id":38207610,"url":"https://github.com/gonfff/safex","last_synced_at":"2026-01-17T00:39:07.070Z","repository":{"id":323379834,"uuid":"1093014180","full_name":"gonfff/safex","owner":"gonfff","description":"Safe secrets exchange","archived":false,"fork":false,"pushed_at":"2025-12-14T13:30:07.000Z","size":22949,"stargazers_count":3,"open_issues_count":0,"forks_count":0,"subscribers_count":0,"default_branch":"master","last_synced_at":"2025-12-16T19:53:36.981Z","etag":null,"topics":["opaque","secrets-exchange"],"latest_commit_sha":null,"homepage":"https://safex.gonfff.com","language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/gonfff.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-11-09T18:37:05.000Z","updated_at":"2025-12-14T13:29:31.000Z","dependencies_parsed_at":null,"dependency_job_id":null,"html_url":"https://github.com/gonfff/safex","commit_stats":null,"previous_names":["gonfff/safex"],"tags_count":9,"template":false,"template_full_name":null,"purl":"pkg:github/gonfff/safex","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gonfff%2Fsafex","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gonfff%2Fsafex/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gonfff%2Fsafex/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gonfff%2Fsafex/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/gonfff","download_url":"https://codeload.github.com/gonfff/safex/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gonfff%2Fsafex/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28490338,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-16T23:55:29.509Z","status":"ssl_error","status_checked_at":"2026-01-16T23:55:29.108Z","response_time":107,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["opaque","secrets-exchange"],"created_at":"2026-01-17T00:39:03.242Z","updated_at":"2026-01-17T00:39:07.063Z","avatar_url":"https://github.com/gonfff.png","language":"Go","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Safex\n\n\u003cp align=\"center\"\u003e\n  \u003cstrong\u003eSafe secret exchange\u003c/strong\u003e\u003cbr\u003e\n  \u003ca href=\"https://github.com/gonfff/safex/actions/workflows/ci.yml\"\u003e\n    \u003cimg src=\"https://github.com/gonfff/safex/actions/workflows/ci.yml/badge.svg\" alt=\"Build Status\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://img.shields.io/github/license/gonfff/safex\"\u003e\n    \u003cimg src=\"https://img.shields.io/github/license/gonfff/safex\" alt=\"License: MIT\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://goreportcard.com/report/github.com/gonfff/safex/app\"\u003e\n    \u003cimg src=\"https://goreportcard.com/badge/github.com/gonfff/safex/app\" alt=\"Go Report Card\"\u003e\n  \u003c/a\u003e\n  \u003ca href=\"https://github.com/gonfff/safex/pkgs/container/safex\"\u003e\n    \u003cimg src=\"https://img.shields.io/badge/image_size-39MB-blue?logo=docker\u0026color=blue\" alt=\"Docker image size\"\u003e\n  \u003c/a\u003e\n\u003c/p\u003e\n\nSafex is a security‑first secret sharing service that keeps sensitive data \u003cstrong\u003ewith zero server trust\u003c/strong\u003e. It’s run for real on [Koyeb](https://safex.koyeb.app), so you can try it right now. You can also run your own Docker image from [GHCR](https://github.com/gonfff/safex/pkgs/container/safex), or build it yourself because the entire project is open source.\n\n## Core concepts\n\n- Secrets are \u003cstrong\u003eencrypted and decrypted locally in the browser\u003c/strong\u003e with WebAssembly (WASM) before they ever touch the server, so backend compromises never expose cleartext data.\n- The recipient \u003cstrong\u003emust prove knowledge of the PIN\u003c/strong\u003e via the OPAQUE protocol before any download, blocking offline brute-force attacks and network PIN transmission.\n- Expiration policies and view limits ensure every shared secret has a defined lifetime and data will be \u003cstrong\u003edestroyed automatically after reading or expiry\u003c/strong\u003e.\n\n## How safety is achieved\n\n- Secrets are encrypted and decrypted locally in the browser with WebAssembly (WASM).\n- Secrets are stored encrypted on the server, which has no access to plaintext data.\n- Safex does not receive PINs at any point, thanks to the OPAQUE protocol.\n- No sensitive information is written to any logs.\n- Messages are permanently deleted as soon as they are read or expire.\n- An attacker needs both the unique link and the PIN to intercept a message.\n- The code is open source and can be audited by anyone.\n\n## Documentation\n\nA full walkthrough is available on the [Docs page](https://gonfff.github.io/safex/).\n\n### Warning\n\nRedis and S3 backends not tested yet!!!\n\n## Usage\n\n1. Create a new secret with text or file, set expiration and choose a PIN.\n   ![Create](screenshots/create.png)\n2. Share the generated link and PIN with the recipient via separate channels.\n   ![Share](screenshots/link.png)\n3. The recipient opens the link, enters the PIN, and retrieves the secret.\n   ![Retrieve](screenshots/retrieve.png)\n4. Read/download/copy the secret before it self-destructs.\n   ![Success](screenshots/load.png)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgonfff%2Fsafex","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgonfff%2Fsafex","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgonfff%2Fsafex/lists"}