Flashpaper Launches Self-Destructing Secret Sharing Tool with No Database

Introduction to Flashpaper

Flashpaper is a newly launched open-source tool designed for sharing self-destructing secrets. The application aims to provide a mechanism for information to be "burned" after being read, similar to a dead man's switch concept. It offers features like a countdown timer for destruction or a 24-hour maximum expiry if unopened.

Zero-Knowledge for Web Use

For web-based usage, Flashpaper implements encryption directly in the browser. The encryption key is kept in the URL fragment (after the # symbol), ensuring that the server never receives the key. This design provides a zero-knowledge architecture for web users, enhancing privacy by preventing the server from accessing the plaintext.

RAM-Only Operation

A core feature of Flashpaper is its lack of a persistent database. All information is stored exclusively in RAM, which contributes to its lightweight design and ensures that data is not retained long-term on the server. This approach aligns with the self-destructing nature of the secrets shared through the platform.

API for AI Agents

Flashpaper also includes a REST API and an MCP server to facilitate secret link creation for AI agents. This allows agents to generate "dead-drop" style links that can be claimed only once, with subsequent attempts resulting in a 404 error. However, the server temporarily processes plaintext during the encryption process for the API flow, meaning this specific use case is not zero-knowledge.

Open Source and Licensing

The project is open source under the MIT license. It also includes an "honorware" policy for enterprise use, particularly for self-hosted Docker deployments. The developer has invited feedback from the community, especially regarding the security implications of the AI agent API.