Ghost Vault

GhostVault is a lightweight, self-hosted script designed for sharing sensitive data over the internet securely.

If you frequently need to send passwords, access keys, or any other confidential information online but don't trust third-party service providers, this script was built specifically for you.

While transmitting data over the web always carries inherent risks, GhostVault implements multiple layers of protection to minimize them:

1. Client-Side Encryption: Secrets are never sent over the internet in plain text. They are encrypted directly in your web browser. The decryption key is stored solely in the unique URL fragment (after the # symbol), which is never sent to the server.
2. Military-Grade Security: To ensure maximum safety and absolute privacy, encryption is performed on the client side using the highly secure, authenticated AES-256-GCM symmetric algorithm via the native Web Crypto API.
3. Self-Destructing Secrets: By default, secrets have a limited lifetime and a view-count threshold, both of which can be customized by the user during creation.
4. Server-Side Password Protection: An additional layer of security is provided via an optional server-side password, which is stored securely in your database using modern hashing.
5. Paranoid Access Key: For maximum security, the "Paranoid Access Key" feature allows you to generate an extra decryption key. You can send this key via a separate, out-of-band communication channel, rendering intercepting the main link completely useless.
6. Fully Self-Contained: All script dependencies are included in the package. It requires no external CDN connections or third-party resources, meaning it can run flawlessly in isolated offline networks (air-gapped environments).
7. Code Integrity: For added security, the script features built-in minification and obfuscation algorithms for frontend JS code to prevent tampering.
8. Anti-Brute Force Protection: To block automated guessing attacks, GhostVault features a built-in rate-limiting mechanism based on IP addresses. This makes brute-forcing secret codes virtually impossible.

GhostVault comes with a powerful, intuitive admin panel that allows you to manage the platform in real time:

• Real-time Analytics: Monitor usage statistics and track potentially malicious activities.
• Full Branding Control: Easily change the site name, UI text labels, and integrate ads.
• Custom Color Themes: Switch between beautiful pre-built color schemes or easily create your own by simply adding a set of colors to a local JSON file.
• Flexible Database Support: Use an out-of-the-box SQLite database (auto-created in your site directory) or connect to a MySQL/MariaDB database (recommended for production).

Live Demo
Demo Link: https://ghost-vault.rf.gd/

Admin Panel: https://ghost-vault.rf.gd/admin

Credentials (User/Pass): admin / admin