Hemmelig Hosting Live In 5 Minutes

Hemmelig hosting on xCloud gives you a private place to share passwords and files through expiring, encrypted links. xCloud deploys the official Hemmelig 7.6.1 image as a single container, generates the session secret, mounts persistent volumes for the database and uploads and publishes it over HTTPS on your domain in minutes — then the first person to finish /setup becomes the administrator.

Deploy your Hemmelig

No terminal
No technical skills needed
No lock-in, cancel anytime

What is Hemmelig?

Hemmelig is an open-source tool for sharing sensitive information through a link. You enter a secret, set how long it lives, how many times it can be viewed and, optionally, a password, then send the generated link to the recipient.

Encryption happens in the browser with AES-256-GCM, so the server only stores encrypted data and the decryption key stays in the link fragment. Once the secret is viewed or expires, it is deleted.

From Sign-Up to Your First Secret In Just 3 Easy Steps

Self-hosting secret sharing normally means a container, a database file, a generated auth secret, a domain and a certificate before the first link is created. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account, pick Hemmelig from the OneClick catalog and choose a domain. There are no extra fields to fill in — xCloud generates the session secret.
Step 02
We Deploy It For You
One click. We run the official Hemmelig image pinned by immutable digest as a single container, mount the hemmelig_database and hemmelig_uploads volumes, bind port 3000 to localhost only and publish it over HTTPS on your domain. There is no separate database service.
Step 03
Create The Admin, Share A Secret
Wait about a minute for the first-boot migrations, then open the Setup URL from your installation credentials and create the administrator account. Sign in, create your first secret and copy the share link.

Everything Hemmelig Does, On Your Own Server

Hemmelig runs in full here: encrypted secret sharing on your own domain, with the database and uploads kept on volumes you own.

Client-Side AES-256-GCM Encryption
Data is encrypted in the browser before it leaves, so the server only stores encrypted data.
Self-Destructing Secrets
Set an expiration time and a view limit; the secret is deleted once it is viewed or expires.
Password And IP Restrictions
Add an optional password to a secret, or limit access to specific IP ranges.
File Attachments
Signed-in users can attach encrypted files to a secret and share them through the same link.
Webhooks, QR Codes And Rich Text
Get webhook notifications when secrets are viewed or burned, share a link to a phone with a QR code, and format a secret in the rich text editor.
Registered Users Only
Only signed-in users can create secrets and public registration is closed by default, while recipients can still open a link they are given.

Everything You Need To Run Your Secret Sharing 24/7

Managed hosting for Hemmelig, so the parts that keep it online are not your problem.

Hemmelig 7.6.1 deployed instantly
Official image pinned by digest
Session secret generated for you
Kept behind xCloud nginx
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With Hemmelig

Hand over credentials
Send a password or API key to a colleague or client without leaving it in a chat thread or an email inbox.
One-time access
Limit a secret to a single view or a short lifetime so the link stops working after it has done its job.
Share files privately
Attach files to a secret as a signed-in user and let the recipient pick them up from the same expiring link.
Keep sharing inside your own instance
Run secret sharing on your own domain, with creation restricted to registered users and public sign-up closed by default.

Hemmelig Screenshots

The Hemmelig Secrets dashboard listing secrets with their protection, views left and expiry

A recipient opening a Hemmelig secret link, showing the decrypted text and a delete option

Hemmelig vs Alternatives

PrivateBin: A minimalist pastebin where the server has zero knowledge of the data; the focus is text pastes rather than a signed-in dashboard.
Yopass: End-to-end encrypted sharing of expiring, single-use secrets and small files.
Password Pusher: Shares passwords, notes, URLs and files through links that expire by time or view count, with an audit trail.
OneTimeSecret: A hosted service for one-time links, rather than something you run on your own server.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for Hemmelig hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

More headroom if Hemmelig sits alongside other team tools.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. Hemmelig itself is released by its maintainers under the O'Saasy License.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy Hemmelig on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Run Your Own Secret Sharing?

Hemmelig on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

What makes Hemmelig different from a password manager?

It shares a single secret through a link that expires or burns after viewing, rather than storing a vault.

How do I sign in?

There is no default password: the first person to complete /setup becomes the administrator.

Can anyone create secrets on my instance?

No. Only signed-in users can, and public registration is off until you enable it in the Environment editor. Recipients can still open a link they are given.

What runs alongside Hemmelig?

Nothing. It is one container with SQLite storage, so there is no separate database service to manage.

Why is the in-app instance page read-only?

Instance settings are managed in the Environment editor (managed mode). Keep HEMMELIG_MANAGED and HEMMELIG_REQUIRE_REGISTERED_USER set so anonymous secret creation stays blocked.

What should I back up?

Both named volumes, hemmelig_database (the SQLite database) and hemmelig_uploads (attached files), together with the generated BETTER_AUTH_SECRET. Rotating that secret signs everyone out.

Backups in xCloud

Who can open a secret link?

Anyone holding it, and that is how sharing works. The decryption key is in the link fragment, so send the link only to the person who should read it, and use a password, an IP range or a view limit for extra protection.

Does xCloud automatically back up or update Hemmelig?

No. The template pins Hemmelig 7.6.1 by immutable digest; new installations use the pinned release, existing sites are not automatically upgraded. Back up first, read the upstream release notes, then update the readable tag and digest together on your own schedule, never removing the volumes. Server-level backups and snapshots are available on every Cloud VPS.

What are the server requirements, and why does this page sell 6 GB?

The template's baseline asks for 1 CPU core, 256 MB of RAM and 2 GB of disk; measured idle use in QA was about 167 MiB. This page sells the 6 GB tier as the entry rung, with real headroom above that baseline.

What survives a restart?

Data on the hemmelig_database and hemmelig_uploads volumes — a secret created before an xCloud Restart still opened afterwards in QA, because both are persistent named volumes.

What is the licence?

Hemmelig is released under the O'Saasy License, which forbids competing hosted or SaaS offerings whose primary value is the software itself. Running it for your own team's use on your own server is what this template is for.

Is xCloud officially partnered with Hemmelig?

No. No official partnership or endorsement between xCloud and the Hemmelig project has been verified. This is a deployment and server-management option for the open-source Hemmelig project.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.