Password Tools Compared: OneTimeSecret, PrivateBin, SnapPass & Encipher.Me
A factual comparison instead of marketing: we operate Encipher.Me – and for every tool we also say when it is the better choice than our own.
Disclosure
Encipher.Me is our own product, so this comparison is not neutral. That is why we keep it verifiable: all statements about other tools come from their official documentation and are linked, and for each tool we explicitly state when it is the better choice than Encipher.Me.
The one question that makes the difference
All four tools solve the same task: transmitting a password so it does not sit in a mailbox forever. They differ in two respects – where encryption happens and who runs the service. Everything else follows from that.
If encryption happens in the browser (Encipher.Me, PrivateBin), the plaintext never reaches the server and the operator cannot technically read the content. If it happens on the server (OneTimeSecret, SnapPass), the plaintext passes through it – that still protects well against database theft, but it shifts part of the trust onto the operator. With operations it is the other way round: PrivateBin and SnapPass you have to host yourself, while Encipher.Me and OneTimeSecret are usable immediately.
Comparison table
| Encipher.Me | OneTimeSecret | PrivateBin | SnapPass | |
|---|---|---|---|---|
| Encryption happens | In the browser | On the server | In the browser | On the server |
| Plaintext reaches the server | No | Yes | No | Yes |
| Own server required | No | No (hosted) | Yes or third-party instance | Yes |
| Usable instantly, no setup | Yes | Yes | Only via third-party instance | No |
| Open source | No | Yes | Yes | Yes (MIT) |
| Hosted in Germany | Yes (IONOS) | n/a | Your choice | Your choice |
| GDPR Art. 28 processing agreement | Yes | n/a | Your responsibility | Your responsibility |
| Additional password protection | Yes (Argon2id) | Yes (passphrase) | Yes | n/a |
| File attachments | Yes (with account) | n/a | Yes (off by default) | No |
| Registration required | No | No | No | No |
| Cost | Free | Free + paid plans | Free (plus hosting) | Free (plus hosting) |
"n/a" = not publicly documented or not verifiable by us. As of July 30, 2026. Sources: onetimesecret.com, privatebin.info, github.com/pinterest/snappass.
The tools in detail
OneTimeSecret
The decisive difference is not the feature set but where encryption happens – and who could theoretically see the plaintext.
View comparisonPrivateBin
PrivateBin is technically strong – the difference is not security but operation and responsibility.
View comparisonSnapPass
SnapPass is a solid internal tool – if you can operate it. Encipher.Me needs no infrastructure at all.
View comparisonFrequently asked questions
Which tool for transmitting passwords securely is best?
It depends on whether you want to self-host. If you run your own infrastructure and want to audit the code, PrivateBin (client-side encryption, open source) or SnapPass (MIT license, Python/Redis) are the right choice. If you need to send a password right now without any setup, a hosted service is more practical – and then the decisive question is where encryption happens. Encipher.Me and PrivateBin encrypt in the browser, OneTimeSecret and SnapPass on the server.
What does zero-knowledge actually mean for password tools?
Zero-knowledge means encryption happens in the browser and the key never reaches the server – usually because it sits in the fragment part of the link after the # character, which browsers do not transmit per RFC 3986. The operator then only stores ciphertext without the matching key and cannot technically read the content even if they wanted to. If encryption happens on the server instead, the plaintext passes through it and the operator is a potential weak point – even with the best intentions.
Which alternative is hosted in Germany?
Encipher.Me is operated at IONOS SE in Germany, with a data processing agreement under Article 28 GDPR and a German imprint. With PrivateBin and SnapPass you determine the location yourself if you self-host – with a public PrivateBin instance it depends on the respective operator.
Is Encipher.Me open source?
No. OneTimeSecret, PrivateBin and SnapPass are open source, Encipher.Me currently is not. If independent auditability of the source code is a hard requirement for you, those three are the more appropriate choice. Our architecture remains partly verifiable from the outside nonetheless: because encryption runs in the browser, you can confirm in your developer tools that the key stays in the URL fragment and never appears in a request.
Read on
OneTimeSecret alternative · PrivateBin alternative · SnapPass alternative · Share a password securely · Zero-knowledge encryption explained · Self-destructing messages
Operator: IT-Service M.Tichý, Berlin-Spandau, Germany (imprint). Servers located in Germany, processing agreement under Article 28 GDPR (privacy). Last reviewed: July 30, 2026.
No registration. No software. No tracking.