Self-Hosting Overview

Run your own private instance of Onetime Secret with full control over your data, security, and deployment.

Why Self-Host?

Self-hosting Onetime Secret gives you:

• Complete data control - All secrets remain on your infrastructure and network
• Custom security policies - Configure authentication, privacy options, and access controls
• Compliance - Meet regulatory requirements for data handling
• Custom branding - Customize the interface for your organization

Quick Start Options

Choose the deployment method that best fits your environment:

Docker (Recommended)

# Start Redis and Onetime Secret
docker run -p 6379:6379 -d redis:bookworm
docker run -p 3000:3000 -d \
  -e REDIS_URL=redis://host.docker.internal:6379/0 \
  -e SECRET="$(openssl rand -hex 32)" \
  onetimesecret/onetimesecret:latest

Access at http://localhost:3000.

Manual Installation

For production environments requiring custom configurations.

See our Installation & Deployment guide for detailed steps.

What’s Included

Your self-hosted instance includes:

• Web interface - Full-featured UI for creating and sharing secrets
• REST API - Programmatic access for integrations
• Multi-language support - Available in 12+ languages
• Custom domains - Use your own domain and branding

System Requirements

Recommended:

• 2+ CPU cores
• 2GB+ RAM
• 10GB+ disk space
• Redis for session storage
• Node.js 22+ (for development)

Next Steps

1. Getting Started - Step-by-step setup guide
2. Installation & Deployment - Detailed deployment options
3. Configuration Reference - Complete settings documentation

---

Ready to get started? Follow our Getting Started guide.