Enclosed Hosting Live In 5 Minutes

Deploy Enclosed hosting and run your own self-hosted encrypted note sharing service on your own domain. xCloud runs the pinned Enclosed 1.16.0 container with its ciphertext in a persistent volume, generates the session secret and publishes it over HTTPS, so passwords and private files are encrypted in the sender's own browser and then shared by a link that can delete itself after one read.

Deploy your Enclosed

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Enclosed?

Enclosed is a minimalistic web application for sending end-to-end encrypted notes and files, with the server holding no knowledge of their content. Run as self-hosted Enclosed, it fills the role of Privnote-style one-time note sites: the sender can set a password, choose an expiration and have the note self-destruct after it is read, with the key kept in the link fragment. It encrypts in the browser with AES-GCM and is licensed under Apache-2.0.

On xCloud the template deploys the official Enclosed 1.16.0 image, pinned by digest, as one Node.js container with filesystem storage in the enclosed_data volume. There are no accounts and no admin login by default. Notes expire after one day unless the sender picks another time, "never expires" is disabled, and the encrypted payload is capped at 10 MiB.

From Sign-Up to a Live Note Service In Just 3 Easy Steps

A private note service normally means a container, a secret, a volume, a domain and a certificate before the first secret is shared. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Enclosed from the OneClick catalog. Choose your domain and target server; the install form has no application fields to fill in.
Step 02
We Deploy It For You
One click. We start the Enclosed 1.16.0 image pinned by digest, mount the enclosed_data volume at /app/.data for ciphertext and expiry state, generate the session secret and publish HTTPS on your domain.
Step 03
Send Your First Note
Open your HTTPS address, write a note, attach a file if needed and choose a password, expiry or read-once deletion. Share the complete link, including the part after the # sign, then test it in a private window.

Everything Enclosed Does, On Your Own Server

Enclosed runs here with its browser-side encryption and expiry controls, on your own domain and server.

Encryption In The Browser
Notes are encrypted on the client with AES-GCM using a 256-bit key derived through PBKDF2, so the server stores ciphertext rather than the note text.
Read-Once Deletion
The sender can have a note self-destruct after it has been read, so a shared password or token cannot be opened a second time.
Expiry And Password
Set an expiration period and an optional password for each note. In this template the default is one day and "never expires" is disabled.
File Attachments
Attach a file to a note and share it the same way. The encrypted payload in this template is capped at 10 MiB.
The Key Stays In The Link
The decryption key lives in the URL fragment after the # sign, which is not sent to the server, so the whole link must be shared privately.
A Command-Line Client
Upstream ships a CLI for creating notes from the terminal, handy for scripts that need to hand over a secret.

Everything You Need To Run Your Note Sharing 24/7

Managed hosting for Enclosed, so the parts that keep it online are not your problem.

Enclosed 1.16.0 deployed instantly
Official image pinned by digest
Session secret generated for you
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With Enclosed

Share passwords securely, self-hosted
Send a new account password or API token to a teammate as a note that deletes after one read. The text is encrypted in your browser, and it is stored on your server, not a public note site.
Send read once self-destructing notes
Hand a customer a licence key or a one-time link and let the note destroy itself after they open it. You get no chat history to clean up afterwards.
Pass a sensitive file to a client
Attach a contract or credentials file to a note, add a password and an expiry, and send the link. The recipient downloads it once and the ciphertext expires from your volume.
Give a team an internal secret drop
Run one private address for the whole company so staff stop pasting secrets into chat. Because no accounts exist, restrict who can reach it at the network or xCloud layer.

Enclosed vs Alternatives

Privnote: A hosted site for one-time notes. Enclosed gives you read-once deletion, an optional password, an expiry and file attachments on your own domain, with ciphertext stored in a volume you hold.
PrivateBin: Another open-source encrypted sharing app with its own OneClick page. Enclosed is built around notes and file attachments, with AES-GCM encryption in the browser and a minimalistic interface.
Yopass: Another self-hosted secret-sharing app you can deploy on xCloud. Enclosed pairs browser-side encryption with an optional per-note password and an upstream command-line client for creating notes.
Sup3rS3cretMes5age: Another self-destructing message service with its own OneClick page. Enclosed runs as one Node.js container and stores ciphertext and expiry data in a single enclosed_data volume.

Ready To Run Your Own Secret Sharing Service?

Enclosed on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Keep ciphertext on your own server. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Are Enclosed notes end-to-end encrypted?

Yes. Notes and attachments are encrypted in the browser, and the server stores ciphertext and expiry metadata rather than the content. One caveat: a compromised server could serve modified JavaScript, so keep HTTPS on and secure your xCloud account and server.

Can an Enclosed note self-destruct after reading?

Yes. When creating a note the sender can choose deletion after the first read, and can also set a password and an expiration. Test the read-once link in a separate private browser session before relying on it for anything important.

Can I attach files to an Enclosed note?

Yes. You can attach a file when you write the note, and it is encrypted in the browser along with the text. In this template the encrypted payload is capped at 10 MiB, so split or compress anything bigger than that.

Is Enclosed safe for sharing passwords?

It is built for that job: the note is encrypted in your browser, can be protected with a password and can self-destruct after one read. Share the complete link privately, because the decryption key is the part after the # sign.

Can I self-host Enclosed with Docker?

Yes, and this template is Enclosed Docker hosting done for you. It runs the official image, pinned by digest, as one Node.js container on port 8787 bound to localhost, filesystem storage in enclosed_data, and HTTPS from xCloud's nginx. There is no run command to maintain.

What does Enclosed cloud hosting on xCloud include?

A dedicated Cloud VPS that we provision, patch and monitor, with Enclosed running, HTTPS on your domain and a session secret generated. The instance and its stored ciphertext are yours. There are no accounts by default, so limit who can reach the address.

How much RAM does Enclosed need?

The template's catalog minimum is 512 MB of RAM, 1 CPU core and 1 GB of disk, and the 6 GB plan clears that easily. Disk use depends on payload size and retention; the 10 MiB payload limit and one-day default expiry keep storage pressure low.

How do I update Enclosed?

Nothing updates itself: the template pins Enclosed 1.16.0 by digest. To move up, back up enclosed_data, read the upstream release notes and configuration changes, then recreate the container without deleting or renaming the volume. Never use docker compose down -v for an upgrade.

What should I back up for Enclosed?

The enclosed_data volume, which holds ciphertext, note metadata and expiry state. Backups do not contain the URL-fragment keys or passwords, so restored notes still need their complete links. Keep copies off the server and test a restore.

Backup and restore Docker apps

Is Enclosed free and open source?

Yes. Enclosed carries the Apache License 2.0 and its code is public on GitHub. You pay xCloud for the Cloud VPS, not for the software, and the ciphertext in enclosed_data is yours. Keep upstream's copyright and notice files if you redistribute a modified build.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.