Yopass alternative: OncePad vs Yopass
Both provide no-account, browser-encrypted, one-time text and files. Their operating models differ.
Short answer: OncePad is a free, no-account service for sharing a password, secret, or file through an end-to-end encrypted link. The link contains no decryption key, works once, and expires after 24 hours. Files may be up to 25 MB.
Where they agree
Yopass is one of the closest OncePad alternatives: it encrypts secrets and files in the browser before upload, the server never receives the decryption key, one-time access is the default, secrets expire automatically, and neither sender nor recipient needs an account. Yopass also explicitly recommends self-hosting for sensitive use.
The core difference: managed fixed workflow vs self-hosted flexibility
Yopass uses OpenPGP and carries the client-side decryption material in the shared URL, with optional custom password protection. It offers configurable expiry, optional multi-view links, a CLI, Docker and Kubernetes deployment, and several storage backends. OncePad fixes the policy instead: a generated 7-word passphrase is always separate from a key-less link, every link works once, every unopened secret expires within 24 hours, and hosted text ciphertext lives only in RAM.
Side by side
| Feature | OncePad | Yopass |
|---|---|---|
| Encryption location | Browser, before upload (AES-256-GCM) | Browser, before upload using OpenPGP |
| Key placement | Derived from a generated passphrase sent separately; no key in link | Client-side decryption material in the shared URL; optional custom password |
| File support / limit | One browser-encrypted file up to 25 MB | Encrypted file streaming; limit and storage backend are instance-configured (server default up to 1 MB without dedicated storage) |
| Expiry | Exactly one reveal or 24 hours | One-time by default; configurable hour/day/week expiry and optional multi-view mode |
| Accounts | No account | No accounts or user management |
| Open-source status | Hosted app source not publicly released | Public source repository with documented Docker, Kubernetes, and CLI workflows |
When Yopass may suit you better
Choose Yopass when self-hosting is a requirement, secrets need to be created from a terminal, your organization wants to choose Redis, Memcached, disk, or S3 storage, or you need configurable expiry and view behavior. Its read-only deployment mode can also separate creation from public retrieval.
When OncePad is the better fit
Choose OncePad when you want a managed endpoint with no deployment work and want every sender pushed into the same two-channel rule. The passphrase is strong and generated by default, the link never contains it, and there is no option to weaken the one-read or 24-hour policy.
Last verified: August 18, 2026. Descriptions of Yopass are based on its primary documentation and are given in good faith; editions, limits, and policies change, so verify them before deciding. Yopass is a trademark of its respective owner and is not affiliated with OncePad.