Temp.pw
Security and privacy
password sharing
SHOW HN2025
14points
41comments
#2,392of 3,837 in 2025
Top 63%of 2025 by points
How HN took it
CuriousMostly questions and neutral comments
2 positive, 11 neutral or asking, 0 mixed, 7 critical, out of 20 comments about the project. Thread score -0.25.
Idea: 1 for, 4 againstPrivacy: 1 for, 2 againstExecution: 0 for, 1 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Solves a common problem of sharing passwords
From 2 comments
solves a common problem. assuming there's a real crng generating them, the links expire in a short window, they aren't logged, and the hashes aren't computed for a commercial…
motohagiography on HNI disagree with this take because of the way people share passwords OOB right now meets zero security criteria. - signal requires both users have signal and those personal…
motohagiography on HN
Objections
Server sees plaintext password; not safe for real secrets
From 3 comments
This is so, utterly, unspeakably, NOT a good idea to use. You're trusting a third-party server with the plaintext of an actual secret. This violates nearly every principle of…
TimTheTinker on HNWhy does the "share" button upload the password to your server in plaintext?
yawndex on HNThe "share which expires after one use" part requires the password either be visible to the server or encoded in the URL (also visible to to the server) unless you also want to…
zamadatix on HN
Possible honeypot or collection of known passwords
From 3 comments
Honeypot?
eigenvalue on HNIf you were a cracker, you'd add every one of these passwords to a database (maybe of up to 10B passwords) to try first before moving to cracking hashes.
TimTheTinker on HN> low sensitivity tokens like temporary passwords I 100% agree with you for that use case. I was commenting more on "here's your password for this or that service", or a manual…
TimTheTinker on HN
Password manager or Signal is a better option
From 3 comments
A fun side project I guess, but I would never trust this for anything. Why would I use this instead of an actual password manager that has password sharing functionality? That…
dgrin91 on HNI just use my password manager. https://support.1password.com/share-items/
esafak on HNThis is so, utterly, unspeakably, NOT a good idea to use. You're trusting a third-party server with the plaintext of an actual secret. This violates nearly every principle of…
TimTheTinker on HN
Requests
Client-side encryption with key in URL fragment
From 2 comments
https://temp.pw/?item=82282c4798d60cb4#key=idh36ud I think something like this could work. The server store encrypted password identified by item id. Browser side decrypt the…
new_user_final on HNOh I was just talking about the “transmitting to the server _at all_” part, but yeah some end-to-end encryption would be nice.
Edd314159 on HN
More features and details
From 1 comment
This is pretty light on features and details. When the use case comes up, I like to use https://github.com/pglombardo/PasswordPusher (online version here https://pwpush.com/).…
ziddoap on HN
Fix UI cues: editable input and share button state
From 2 comments
Feedback: Input box gives zero clue that it is editable. Share button looks disabled button.
new_user_final on HNWhy is the Share button greyed out, but clickable? Did you vibe code this? (Those are two distinct questions, but yes, I was low-balling the effort that went into this web app.)
a3w on HN
Questions
Why is the share button greyed out?
From 1 comment
Why is the Share button greyed out, but clickable? Did you vibe code this? (Those are two distinct questions, but yes, I was low-balling the effort that went into this web app.)
a3w on HN
Why upload the password in plaintext?
From 1 comment
Why does the "share" button upload the password to your server in plaintext?
yawndex on HN
What is the use case?
From 1 comment
This generates a random password that can be shared via a one-time link. Why? What is the situation where this would be used?
Minor49er on HN
Alternatives named
Password Pusher
From 1 comment
This is pretty light on features and details. When the use case comes up, I like to use https://github.com/pglombardo/PasswordPusher (online version here https://pwpush.com/).…
ziddoap on HN
OneTimeSecret
From 1 comment
nice work. i've used https://onetimesecret.com/ for this kind of thing for several years
qntmfred on HN
1Password sharing
From 2 comments
I just use my password manager. https://support.1password.com/share-items/
esafak on HNThis is so, utterly, unspeakably, NOT a good idea to use. You're trusting a third-party server with the plaintext of an actual secret. This violates nearly every principle of…
TimTheTinker on HN
Signal disappearing messages
From 2 comments
This is so, utterly, unspeakably, NOT a good idea to use. You're trusting a third-party server with the plaintext of an actual secret. This violates nearly every principle of…
TimTheTinker on HNIs a disappearing message on Signal protected from screenshots? Otherwise I think a disappearing message security is actually lower than a non-disappearing one because of the…
frizlab on HN