# Whisper

Whisper is a self-hosted other app. Whisper provides a simple way to share secret information with someone else, such as passwords, credentials, keys, or other sensitive data. It is open source and self-hosted, installable on Docker Hub and Unraid.

Canonical page: https://ourlocalhost.com/app/1428/whisper

## Description

Whisper provides a simple way to share secret information with someone else, such as passwords, credentials, keys, or other sensitive data.

## Platform availability

Available on 1 of 9 platforms: Unraid.

## Health score

44/100 (Fair), based on 4 of 4 factors.
- Maintained: 56 (last commit 195 days ago)
- Popular: 22 (11 GitHub stars)
- Easy to install: 35 (1 install platform, install notes, Docker image)
- Light to run: 60 (2 GB minimum RAM, runs on ARM)

## Links

- Docker Hub: https://hub.docker.com/r/viyh/whisper
- GitHub: https://github.com/viyh/whisper
- Unraid: https://ca.unraid.net/apps/whisper-0dxuwui1hgg37y?q=Whisper

## Common questions

### How do I create the required config file for a Whisper Docker deployment?

Generate a random secret key of 32 or more characters, replace the placeholder in the default config, and save the result as config.yaml.

### What port should be published for the Whisper Docker container?

The documented Docker run command publishes host port 8000 to container port 8000.

### Can the server read the plaintext secrets?

No, secrets are encrypted in the browser with AES-256-GCM before transmission, so the server never sees plaintext data.

### What happens to a one-time secret after it is retrieved?

One-time secrets are deleted atomically after retrieval, and concurrent requests cannot both succeed.

### What protections are in place against repeated password guesses?

Whisper limits access to 10 attempts per minute per IP and locks a specific secret out after 10 failed password attempts.

---
Source: Our Local Host (https://ourlocalhost.com/app/1428/whisper), the self-hosted and open-source app directory.