Hemmelig Hosting Live In 5 Minutes

Deploy Hemmelig hosting and share passwords and notes through links that expire, on your own domain. xCloud runs the pinned Hemmelig v7.6.1 image, generates the auth secret, keeps the database and uploads on two persistent volumes and publishes it over HTTPS in minutes. There is no default password: you open the setup page first and create the administrator, and only signed-in users can create secrets.

Deploy your Hemmelig

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Hemmelig?

Hemmelig is an encrypted secret sharing app. You enter a secret, set an expiry, view limits and an optional password, and share the generated link, after which the secret is deleted once it is viewed or expires. Upstream describes a zero-knowledge design in which encryption happens in your browser. Run on your own server it is a self-hosted Hemmelig, an alternative to a hosted secret-sharing service such as OneTimeSecret, released under the O'Saasy License rather than an open-source licence.

On xCloud it is the upstream Hemmelig v7.6.1 image, pinned by digest, with SQLite on the hemmelig_database volume and attached files on hemmelig_uploads. There is no seeded password: the first completed setup form creates the administrator. Public registration is off, and only signed-in users can create secrets, though anyone holding a link can open it.

From Sign-Up to a Live Hemmelig In Just 3 Easy Steps

A Hemmelig install normally means the app container, two volumes, an auth secret, locked-down registration, a domain and a certificate before the first secret. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick Hemmelig from the OneClick catalog. Choose a domain and target server; the install form has no fields to fill in.
Step 02
We Deploy It For You
One click. We start hemmeligapp/hemmelig v7.6.1, pinned by digest, generate the auth secret, mount hemmelig_database and hemmelig_uploads, turn public registration off and publish it over HTTPS. Allow about a minute.
Step 03
Claim The Admin At /setup
Open your domain's /setup page straight away and create the administrator. The first completed setup wins. Then sign in and create a secret to test the link.

Everything Hemmelig Does, On Your Own Server

Hemmelig v7.6.1 runs here with expiring, encrypted secret links, on volumes you own.

Client-Side Encryption
Upstream encrypts secrets in the browser with AES-256-GCM before they leave it, so the server stores only encrypted data.
Self-Destructing Links
Set an expiry and view limits, and the secret is deleted once it is viewed or expires.
Optional Passwords And IP Limits
Add a password to a secret, or restrict access to chosen IP ranges, for another layer of protection.
Files For Signed-In Users
Attach encrypted files to a secret. Only signed-in users can create secrets and upload.
Registration Closed
Public registration is off and only signed-in users create secrets, though anyone holding a link can open it.
Database And Uploads On Volumes
SQLite sits on hemmelig_database and attached files on hemmelig_uploads, so a restart keeps your data.

Everything You Need To Run Your Secret Sharing 24/7

Managed hosting for Hemmelig, so the parts that keep it online are not your problem.

Hemmelig v7.6.1 deployed instantly
Image pinned by digest
Auth secret generated for you
Free SSL certificate
Database and uploads on persistent volumes
Server backups and snapshots
Server security updates included
Choose your server region
Unused balance refunded

What You Can Do With Hemmelig

Send a password that expires
Share a credential through a link that deletes itself after one view.
Share a file securely
Attach an encrypted file to a secret instead of emailing it.
Run your own secret-sharing page
Offer your team a sharing tool on your own domain instead of a third-party site.
Limit who can open a link
Add a password or an IP restriction to a secret so only the intended person can read it.

Hemmelig Screenshots

The Hemmelig Secrets dashboard listing secrets with their protection, views left and expiry

A recipient opening a Hemmelig secret link, showing the decrypted text and a delete option

Hemmelig vs Alternatives

OneTimeSecret: Hemmelig is a self-hosted alternative to OneTimeSecret and to Privnote: secrets are encrypted in the browser and deleted after they are viewed or expire, on your own server.
PrivateBin: A minimalist pastebin with zero knowledge of the data, available as its own OneClick app.
Yopass: End-to-end encrypted sharing of expiring secrets, available as its own OneClick app.
Password Pusher: Share passwords and files through expiring links with an audit trail, available as its own OneClick app.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Hemmelig hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

Headroom if Hemmelig shares the server with other apps.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Hemmelig is released under the O'Saasy License.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Hemmelig on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Secret Sharing Tool?

Hemmelig on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own your data. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Can I run Hemmelig in Docker?

Yes, and this template is Hemmelig Docker hosting without the setup: the upstream hemmeligapp/hemmelig v7.6.1 image pinned by digest, with a database volume, an uploads volume, a generated auth secret and HTTPS on your own domain.

How much RAM does Hemmelig need?

The template minimum is 256 MB of RAM, 1 CPU core and 2 GB of disk; peak use measured about 190 MiB. Upstream publishes no formal minimum. Our entry rung is the 6 GB tier, far above what a single sharing instance needs.

How do I create the first Hemmelig admin?

Open your domain's /setup page right after the install and create the administrator. There is no seeded password, and the first completed setup form wins, so do it before anyone else finds the address. Then sign in and create a test secret.

Can anyone create secrets on my Hemmelig?

No. Only signed-in users can create secrets, because anonymous creation is switched off. Anyone holding a secret's link can still open it, which is how sharing works. Recipients do not need an account, and registration stays closed unless you open it.

Can I allow public registration on Hemmelig?

Yes, deliberately. Public registration is off by default. Set HEMMELIG_ALLOW_REGISTRATION to true in the Environment editor and redeploy; HEMMELIG_REQUIRE_REGISTERED_USER separately controls whether secrets need an account. Instance settings come from the environment, so the settings page is read-only. Redeploy after each change.

Where does Hemmelig store secrets and files?

SQLite lives on the hemmelig_database volume and attached files on hemmelig_uploads. Upstream states that encryption happens in the browser and the server stores only encrypted data. Default attached-file and payload limits are 1024 KB each.

What licence does Hemmelig use?

The O'Saasy License, which grants broad use but forbids offering the software to third parties as a competing hosted or SaaS product whose main value is the software itself. It is not an open-source licence, so a Hemmelig cloud of your own is for your own use. Read it before any hosted offering.

How do I back up Hemmelig?

Back up hemmelig_database and hemmelig_uploads together with the generated BETTER_AUTH_SECRET. Restoring the database without the same secret invalidates sessions, and mismatched uploads leave orphan or missing attachments. Nothing schedules this, so run it yourself and keep a copy off the server.

Backup and restore Docker apps

How do I upgrade Hemmelig?

The install stays on its pinned v7.6.1 image until you adopt a newer template version. Back up both volumes and the auth secret first, then read the upstream release notes. Nothing upgrades automatically, and redeploying keeps both volumes.

What happens if I rotate the auth secret?

Everyone is signed out, because BETTER_AUTH_SECRET signs sessions. Back up both volumes before changing it in the Environment editor and redeploying. Leave HEMMELIG_TRUSTED_PROXIES unset so client addresses cannot be forged, and keep the new secret in your backup set.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.