Yopass alternative: OncePad vs Yopass

Both provide no-account, browser-encrypted, one-time text and files. Their operating models differ.

Short answer: OncePad is a free, no-account service for sharing a password, secret, or file through an end-to-end encrypted link. The link contains no decryption key, works once, and expires after 24 hours. Files may be up to 25 MB.

Where they agree

Yopass is one of the closest OncePad alternatives: it encrypts secrets and files in the browser before upload, the server never receives the decryption key, one-time access is the default, secrets expire automatically, and neither sender nor recipient needs an account. Yopass also explicitly recommends self-hosting for sensitive use.

The core difference: managed fixed workflow vs self-hosted flexibility

Yopass uses OpenPGP and carries the client-side decryption material in the shared URL, with optional custom password protection. It offers configurable expiry, optional multi-view links, a CLI, Docker and Kubernetes deployment, and several storage backends. OncePad fixes the policy instead: a generated 7-word passphrase is always separate from a key-less link, every link works once, every unopened secret expires within 24 hours, and hosted text ciphertext lives only in RAM.

Side by side

FeatureOncePadYopass
Encryption locationBrowser, before upload (AES-256-GCM)Browser, before upload using OpenPGP
Key placementDerived from a generated passphrase sent separately; no key in linkClient-side decryption material in the shared URL; optional custom password
File support / limitOne browser-encrypted file up to 25 MBEncrypted file streaming; limit and storage backend are instance-configured (server default up to 1 MB without dedicated storage)
ExpiryExactly one reveal or 24 hoursOne-time by default; configurable hour/day/week expiry and optional multi-view mode
AccountsNo accountNo accounts or user management
Open-source statusHosted app source not publicly releasedPublic source repository with documented Docker, Kubernetes, and CLI workflows

When Yopass may suit you better

Choose Yopass when self-hosting is a requirement, secrets need to be created from a terminal, your organization wants to choose Redis, Memcached, disk, or S3 storage, or you need configurable expiry and view behavior. Its read-only deployment mode can also separate creation from public retrieval.

When OncePad is the better fit

Choose OncePad when you want a managed endpoint with no deployment work and want every sender pushed into the same two-channel rule. The passphrase is strong and generated by default, the link never contains it, and there is no option to weaken the one-read or 24-hour policy.

Last verified: August 18, 2026. Descriptions of Yopass are based on its primary documentation and are given in good faith; editions, limits, and policies change, so verify them before deciding. Yopass is a trademark of its respective owner and is not affiliated with OncePad.