OTS Hosting Live In 5 Minutes

OTS hosting on xCloud gives you a self-hosted one-time secret sharing service, so passwords, API keys and small files travel as a link that works once. Deploy OTS from the OneClick catalog and xCloud launches the pinned image next to a private Valkey with a generated password, mounts a persistent volume and publishes the site over HTTPS. Secrets are encrypted in the browser, so the server only ever stores ciphertext.

Deploy your OTS

No terminal
No technical skills needed
No lock-in, cancel anytime

What is OTS?

OTS is a one-time-secret sharing platform. Its README explains that a secret is encrypted with symmetric 256-bit AES in the browser before it is sent to the server, that a URL carrying the secret's ID and the password is generated, and that the password never reaches the server. The secret is deleted on first read. Self-hosted OTS means that service runs on your own domain, rather than a public instance or a hosted service such as OneTimeSecret. Its licence is Apache-2.0.

Here this template deploys OTS v1.23.0 as the official image, pinned by digest, with a private Valkey 9.1.2 that stores the encrypted secrets on the ots_valkey_data volume. HTTPS is on your domain, and secrets expire after at most seven days. OTS has no accounts or login, so anyone who can reach the site can create secrets.

From Sign-Up to a Live OTS In Just 3 Easy Steps

Self-hosting a one-time secret tool normally means a container, a private cache service, a domain and a certificate before you can share a single secret. This is the same result without assembling any of it.

Step 01
Sign Up
Create your xCloud account and pick OTS from the OneClick catalog. Enter a domain — the template needs no other app-specific fields.
Step 02
We Deploy It For You
One click. We bring up the pinned OTS v1.23.0 image, generate the private Valkey password, and publish it over HTTPS on your domain, usually within a minute.
Step 03
Create And Share A Secret
Open your HTTPS OTS URL, type or paste a secret, optionally attach a file and pick an expiry, then copy the full link — including the part after # — and send it over a private channel.

Everything OTS Does, On Your Own Server

OTS runs in full here — browser-side encryption, one-time links, expiry and file attachments, on infrastructure you control.

Encrypted In The Browser
Secrets are encrypted before they leave the browser; the server stores only ciphertext, and the decryption key stays in the link fragment.
One View, Then Gone
Each secret works once. After the first read, it is deleted — nothing to clean up later.
No Accounts To Manage
There is nothing to sign up for or administer — create a secret and share the link.
Automatic Expiry
Secrets expire on their own; this template caps lifetime at 7 days even if nobody opens the link.
File Attachments
Attach files alongside a secret — the interface advertises up to 64 MiB.
Your Secrets, Your Server
Encrypted secrets are stored on a server you control instead of a third-party secret-sharing account.

Everything You Need To Run Your Secret Sharing 24/7

Managed hosting for OTS, so the parts that keep it online are not your problem.

OTS v1.23.0 deployed instantly
Secrets encrypted in the browser
Private Valkey cache
Burn-after-reading links
Free SSL certificate
Server backups and snapshots
Server security updates included
30+ server locations
Unused balance refunded

What You Can Do With OTS

Send a password to a colleague once
An IT admin pastes a temporary password into OTS, copies the full link including the part after the hash, and sends it over a private channel; the secret is deleted the first time it is read.
Share an API key without leaving it in chat history
A developer hands a key to a contractor as a one-time link instead of pasting it into a chat or ticket, so the plain text never sits in a log or an inbox.
Pass a small file to a client securely
A consultant attaches a small file to a secret, picks an expiry and sends the link, and the file stays on the server only until it expires or is read.
Run a secret-sharing service on your own domain
A team that does not want to use a public instance hosts OTS on its own domain, restricts the site if needed with Basic Auth at the access layer, and decides how long secrets may live.

OTS vs Alternatives

OneTimeSecret: Choose OTS when you want Apache-2.0 software you run yourself; its README says the password never reaches the server, so the server cannot decrypt what it stores. This page makes no claim about OneTimeSecret.
PrivateBin: PrivateBin has its own OneClick page. Choose this template when you want OTS's one-time links, browser-side AES-256 encryption and optional file attachments.
Yopass: Yopass has its own OneClick page. Pick OTS when you want its one-time links, its ots-cli client for scripts and a Valkey-backed store.
Vaultwarden: Vaultwarden has its own OneClick page. OTS is for a single hand-off that is deleted after one read, with no accounts to manage and a seven-day cap on this install.

Simple Pricing. Everything Included.

Dedicated Cloud VPS sizes, pre-configured for OTS hosting. Pick the one that fits, and resize any time.

Cloud VPS 6 GB

Cloud VPS 16 GB

Higher traffic and more concurrent secret creation.

$59.99per month

16 GB RAM
6 vCPU cores
200 GB NVMe SSD
30 TB
Unlimited

Get started

Cloud VPS 24 GB

OTS alongside a whole self-hosted stack.

$84.99per month

24 GB RAM
8 vCPU cores
300 GB NVMe SSD
30 TB
Unlimited

Get started

Every size is a dedicated Cloud VPS we provision, patch, monitor and restore. Billed monthly with no lock-in — delete the server and the unused balance comes back to your account. OTS itself is free under the Apache-2.0 licence.

Docker hosting

Already Have a Server? Bring Your Own

Connect any VPS — DigitalOcean, Vultr, Linode, AWS, Hetzner or bare metal — and deploy OTS on it through the same panel, for a per-server management fee instead of a Cloud VPS rental.

Free

Start your journey without cost.

$0forever

1 server
10 sites

Start free

Starter

Professional

The same platform, discounted at 6–10 servers.

$4per server / month

6–10 servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Agency

The same platform, discounted at 11+ servers.

$3per server / month

11+ servers
Unlimited sites
All features included
Bring any VPS provider

Get started

Priced per connected server, so your rate adjusts automatically as you add or remove servers. You pay your own provider for the server itself.

Self-managed hosting

Ready To Stop Sending Passwords In Chat?

OTS on xCloud runs on a dedicated Cloud VPS that we provision, patch, monitor and restore. Deploy faster. Own the server. Stay in control.

Fast Provisioning
Deploy faster using an xCloud Managed Server built with optimized stacks and high-speed SSDs.
Enterprise-grade security
Protect your infrastructure with a free SSL certificate and more advanced security features at no additional cost.
Intuitive Control Panel
From Server creation to application deployment, everything can be managed from our intuitive control panel.

Hear what people are saying about us

See why agencies, developers, startups, and growing businesses choose xCloud to power their projects.

xCloud works really well, I am surprised by its performance being this the release version, I have tried many paid platforms such as runcloud, cloudpages or serveravatar, as well as free platforms such as CyberPanel, CloudPanel or Hestia Control Panel and direct competitors such as SpinupWP and FlyWP. Of all those that I have tried, the platform that works best for WordPress is SpinupWP and I believe that xCloud can reach and surpass that development, its roadmap is promising. Congratulations to the xCloud team, I hope they become the leading platform in the segment, it has all the potential to achieve it!

Brian Geovanny

I've been with runcloud for the last 3 years. However, after trying xcloud for the last month, I'm switching over. They are on a roll with their setup.

Kevin Pineda

I'm moving my servers to xCloud, a cloud control panel by M Asif Rahman and the WPDeveloper team. Their roadmap looks interesting and no, there are no team mates nor API limits with xCloud! #xCloud #wordpress #hosting

Leo Koo

How Cloud Nine Web Elevated Client Experience While Streamlining Hosting Operations using xCloud

Ed Ellingham

xCloud is like having an expert server team on call — without the big agency costs. It's given me back my time and given my clients peace of mind. Highly recommended for freelancers and small teams who want reliable performance and security.

Dumitru Butucel

xCloud isn't just a solution. It's like one of that friend who got your back when you screw things up pretty bad.

Waqar Ahmed

Trust me when I say, once people explore the potential of xCloud they gonna switch from other panels, just keep delivering the best tech, lots of love for the team 😍😍

Rahul Singh

So far my experience has been smooth like silk. I didn't imagine that configuring and managing a VPS would be so easy. As of today, I have deployed 8 sites. The support is good, and they treat users with respect, even if they ask stupid questions (myself included). For the future, I hope for greater flexibility in scheduled backups and more comprehensive and consistent documentation. I'm sure that within a few months, xCloud will become the leader in its segment. This community is amazing, and the Staff here is super helpful.

Massimo Villa

Came from cloudways then to runcloud then to xcloud. Looks like I'm staying here.

Gerson El

I've recently taken all of my Vultr-hosted sites and gotten rid of cPanel for them to substitute it with xCloud. I have to say, I'm really impressed with xCloud so far! The interface is definitely the standout feature for me.

Tony Lewis

I came from Cloudways and won't go back. Highly impressed with xCloud. Glad I gave them a chance.

Jared McDowell

I like xCloud better than RunCloud, but one thing I'll point out is that some years ago RunCloud was hungry for business, the support was outstanding, and the community was active and helped each other. Maybe it was sold, there was a change in management, or they stopped being hungry, but the quality of the RunCloud offering declined and it hasn't been moving forward quickly. My point is that currently the xCloud team has the edge and it is theirs to keep or lose

David McCan

How Kevin Heinrichs Cut Hosting Costs by 84% While Running WooCommerce & Node.js Sites Efficiently

Kevin Heinrichs

I had 150 sites on cloudways and am in the process of moving them to xcloud. Much faster and better priced.

Dan Spinoza

Dear xCloud Team, I have been using xCloud for some time now and am genuinely impressed with its capabilities and the flexibility it offers by allowing users to bring their own VPS for management. It's a fantastic service, and my experience so far has been very positive. Successful migrated 5 sites on a single server. Xcloud migration tool worked great. There were few hiccups with security plugin like MalCare but disabling the plugin prior to migration worked just fine.

Rahil Maknojia

Came from runcloud. Tried xcloud and never came back.

Karl Fanega

How Advanced Web Strategies Saved Over $2,000 & Recovered 56 Hours per Month Managing 70+ Client Websites

Gary Moody

xCloud gave me what no other hosting platform could: the flexibility of a VPS with the convenience of managed WordPress. As a solo founder running an entire business on one server, that combination is an important unfair advantage.

Jorge de los Reyes Martínez

I use Server Avatar and xCloud and I'll sooner use xCloud than Server Avatar personally.

Jay Pagano

How Newman Web Solutions Ensured Perfect Uptime and Seamless Scaling For 120+ WordPress Sites with xCloud

Lori Newman

I too have moved over to xCloud. It's pretty sweet. One click n8n and uptime Kuma apps

John Aperture

I went from Cloudways to xCloud. No intention on switching in the foreseeable future.

Blaine Moore

Frequently Asked Questions

Feel free to contact us with any questions or concerns you may have.

Is OTS free?

Yes. OTS is free and open source under Apache-2.0, linked from this page at the pinned v1.23.0 tag. Your xCloud bill covers only the Cloud VPS, not OTS, and the software adds no per-secret fee. The Valkey store beside it is a separate BSD-licensed project.

Can you run OTS with Docker?

Yes, and this OTS Docker hosting template does it for you: the official ghcr.io/luzifer/ots image and a private Valkey container, both pinned by digest, run via Docker Compose on a server you rent, not an OTS cloud account. HTTPS is in front of port 3000.

How much RAM does OTS need?

The template manifest asks for 512 MB of RAM, 1 CPU core and 4 GB of disk as a floor. Valkey is bounded to 256 MB with no eviction, so a full store refuses new secrets rather than dropping old ones. This page sells the 6 GB tier, which leaves ample headroom.

Does the OTS server see my secret?

No. Per upstream's README, the secret is encrypted with AES 256-bit in the browser before upload, and the decryption key stays in the link's URL fragment, so the server stores only ciphertext. Anyone holding the complete link can read it once, so send it over a private channel.

How long are secrets kept in OTS?

At most seven days on this install. SECRET_EXPIRY is set to 604800 seconds, and upstream's own default of 0 would keep secrets forever. A secret is also deleted when it is first read. Edit SECRET_EXPIRY in the Environment editor and redeploy to change the cap.

Does OTS have a login?

No. OTS has no accounts, login or administrator role, and this template adds none, so anyone who can reach the site can create secrets and attach files, which stay on your server until they expire or are read. Optional Basic Auth at the access layer is not enabled by default.

Can I attach files to an OTS secret?

Yes, small files. The template README says secrets and small file attachments are encrypted in the browser, and stored as ciphertext until they expire or are read. Because anyone can create secrets here, watch the disk and the 256 MB Valkey bound if the site is open to the public.

Is there an OTS command line client?

Yes. Upstream's README describes ots-cli, which creates and fetches secrets from scripts, and lets you set the instance and attach files. Avoid sending a plain secret straight to any server where you can, since OTS is built so the server never learns it. Point ots-cli at your own domain.

How do I back up OTS?

Include the whole ots_valkey_data volume in your backup and keep the generated Valkey password stable beside it. An older backup can bring back ciphertext of secrets that were later read or expired, so a backup is not risk-free for a burn-after-reading tool. Test restores on a disposable install.

Backup and restore Docker apps

How do I upgrade OTS?

Upgrades are not automatic. The template pins OTS v1.23.0 and Valkey 9.1.2 by immutable digest, and changes to the template only affect new installs. Back up ots_valkey_data, read the upstream release notes, then adopt a newer template version when one is published, and never remove the volume.

Can I cancel anytime?

Yes. There is no lock-in — cancel any time. Hosting is billed monthly and charged for what you actually use, so when you delete the server the unused balance is refunded to your account, less up to 10% in payment-processing fees.