DEV Community

Sasiru Mindaka
Sasiru Mindaka

Posted on

I built an anonymous inbox that even I can't read

#security #webdev #privacy #programming

SecretGate is a self-hosted, zero-knowledge anonymous messaging script in plain PHP. Messages are encrypted in the sender's browser.

Ever sent an "anonymous" message and wondered who could really read it?

The site owner? The database admin? Whoever finds the logs next year?

So I built SecretGate: an anonymous inbox you host yourself, and one that your own server can never read.

How it works

  1. Someone creates a box and gets a link + a Secret Code.
  2. Anyone can drop in a message. No account, no email.
  3. It's encrypted in the sender's browser (AES-256-GCM + RSA-OAEP).
  4. Only the Secret Code can unlock it, again in the browser.

The Secret Code and the plaintext never reach the server. Even a full database dump is just noise, and that includes you, the site owner.

Built for simplicity

Plain PHP, MySQL and Redis. No frameworks, no Composer, no npm, no tracking. Setup takes about 15 minutes, and the README is written for complete beginners.

Try it

👉 Live demo: https://personal.secretgate.site

Create a box, send yourself a message, read it.

Get your own copy

🔥 The first official release is out, and only 99 copies are available.

You get the full source code, the database schema, a beginner-friendly setup guide and a Personal License for your own domain.

👉 Get SecretGate on Gumroad

Questions? Ask below or email support@secretgate.site.

Your secrets stay yours. The server only ever sees noise. 🔐

Top comments (0)