pwpush.com

One-line Introduction

pwpush.com is an open-source secure sharing tool for temporary passwords and files built around “self-destruction.” Maintained by an international developer community, it is suitable for cross-border teams that need to pass sensitive information through non-encrypted channels such as email or chat apps. No client installation is required; everything runs in the browser.

Business Overview

pwpush focuses on solving a very specific pain point: when users need to share passwords, API keys, or small files through insecure communication channels such as WeChat, Slack, or email, how can they ensure that the information is automatically destroyed after the recipient views it, instead of remaining exposed on servers or in chat history? Its core mechanism is “burn after reading”: the sender sets a link validity rule, such as 1 view or 24 hours, and once the recipient opens it, the link immediately expires and the content is deleted from the server. The tool has a certain level of recognition in the open-source security community, including on GitHub, and is often used by DevOps engineers and IT administrators as a preferred self-hosted option. Since it is an open-source project, it does not have a traditional commercial company background; it is more of a developer-driven utility project. Its main users are technical teams, operations staff at SaaS companies, and cross-border collaborators who need to temporarily share credentials.

Who It’s For

• Individual users: People who need to temporarily send a Wi-Fi password or login credential to friends or family without wanting it to be stored permanently.
• Small teams/project management: Teams that need to temporarily share database passwords, SSH keys, or test environment accounts during cross-time-zone collaboration, while ensuring the information does not remain in chat logs.
• Developers/DevOps: Users who want to self-host it and integrate it into CI/CD pipelines for automated distribution of temporary access tokens.
• Cross-border teams: Teams that need to exchange sensitive data with overseas colleagues or clients via email or instant messaging, but do not have access to enterprise-grade encrypted channels.

Key Features and Highlights

• Open-source self-destruct mechanism: Supports setting a maximum number of views, from 1 to 100, and an expiration time, from 1 day to 30 days. After the recipient opens the link, it automatically expires and the content is fully deleted from the server.
• No account registration required: Neither the sender nor the recipient needs to create an account. Links can be generated directly on the website, lowering the barrier to use.
• End-to-end encryption option: Optional password protection is available. The sender can set an additional password, which the recipient must enter before viewing the content, adding another layer of security.
• File sharing support: In addition to text passwords, users can upload small files. The size limit depends on deployment configuration; the official demo site recommends no more than 1MB. Files also support self-destruction.
• Open source and self-hostable: The code is fully open source on GitHub, allowing users to deploy it on their own servers and fully control data storage and the network environment.
• Simple API: Provides a RESTful API, making it easy for developers to integrate with other systems and automate password distribution.

Pricing Analysis

The official hosted site, pwpush.com, is free to use. There are no public paid plans or monthly/annual subscription options. Users can generate links directly through the website without paying anything. For users who need higher quotas, such as larger files, longer validity periods, or enterprise-grade features, there is currently no clear official paid upgrade path, but the open-source version allows users to customize and extend it themselves. From a pricing perspective, it belongs in the “free tier,” though its feature set is also relatively basic. There are no hidden fees, and there is no refund policy because no payment is involved. Users who need professional-grade SLA guarantees or large-scale storage may need to look for a commercial alternative.

How Chinese Users Can Use It

• Network accessibility: Direct access to pwpush.com from mainland China is generally usable, but speeds are average and occasional slow loading or connection timeouts may occur. For cross-border teams, it is recommended that recipients access it from overseas networks, while senders in mainland China can usually generate links normally.
• Payment methods: Since the service is free, no payment is required, so Alipay, WeChat Pay, or credit cards are not relevant. If paid services are introduced in the future, there is currently no payment method information available.
• Whether a VPN/proxy is needed: The official site can be opened directly from mainland China, but its stability is not as good as domestic services. For better reliability, using a self-hosted deployment is recommended, such as deploying the code on a mainland China server or a Hong Kong server, so domestic users can access it smoothly.
• Domestic alternatives: China has tools with similar features, such as “burn after reading” mini programs like “微秘,” or Enterprise WeChat’s “secret file” feature, but they generally lack open-source transparency and API integration capabilities. If the team operates entirely within China, it can also consider temporary sharing features from domestic cloud providers, such as temporary links in Alibaba Cloud OSS.

Pros and Cons

Pros:

• ✅ Fully open source, with transparent code that security-sensitive users can audit and deploy themselves.
• ✅ No registration required; links can be generated with one click, making it extremely easy to use.
• ✅ Strong burn-after-reading mechanism: the server does not retain data, providing strong privacy protection.
• ✅ Free to use, with no hidden costs.
• ✅ Provides an API for developer-friendly automation and integration.

Cons:

• ❌ The official hosted site has average stability, and direct access from mainland China may occasionally lag.
• ❌ File size limits are strict, with the official site limited to 1MB, making it unsuitable for large files.
• ❌ No paid enterprise edition, no SLA guarantee, and not ideal for production environments with high reliability requirements.
• ❌ Narrow feature scope: only supports text and very small files, with no folder sharing, bulk sharing, or version control.
• ❌ No Chinese interface, making it less friendly for non-technical users.

Comparison with Similar Products

• OneTimeSecret: Similar functionality, also open source and free, supporting text sharing and self-destruction, but with weaker file-sharing capabilities. pwpush has a slight edge in file uploads and password protection.
• OnionShare: A secure file-sharing tool based on the Tor network, emphasizing anonymity, but both parties need to install a client and the workflow is more complex. pwpush is lighter and requires no client.
• Firefox Send (discontinued): A temporary file-sharing service once launched by Mozilla, supporting encrypted large-file sharing and self-destruction, but it has been shut down. As an open-source alternative, pwpush has stronger long-term sustainability.

Summary and Recommendation

Best suited for: Temporarily sharing short sensitive text, such as passwords, API keys, and verification codes; quickly transferring configuration files; and helping cross-border teams exchange credentials through non-encrypted chat tools. It is especially suitable for technical teams that can self-host it and maintain full control over their data.

Not suitable for: Sharing large files over 10MB, long-term storage or version management, enterprise-grade audit logs or compliance reports, or non-technical users who want an out-of-the-box experience with a Chinese-friendly interface.

Recommendation: Start by testing the official free version at pwpush.com to experience the self-destruct mechanism and check network latency. If access from mainland China is unstable, or if you need support for larger files, you can download the open-source code and deploy it on a mainland China server or Hong Kong VPS. Since it is completely free, there is no payment risk, so it is safe to try.