Enclosed review: an open-source, end-to-end encrypted app for sending private, self-destructing notes and files. See features, self-hosting, and pricing.
Enclosed is a free, open-source web app for sending private, end-to-end encrypted notes and files that self-destruct after being read or after a set expiration time. It was built by French engineer Corentin Thomasset and launched publicly on Product Hunt in October 2024.
The tool is designed for sharing sensitive one-time information such as passwords or API keys through a link rather than plaintext email or chat, with encryption happening entirely in the sender's browser so the server never has access to the content.
Key Features
Notes are encrypted client-side with AES-GCM using a 256-bit key derived via PBKDF2, giving Enclosed a genuine zero-knowledge architecture where even the server operator cannot read note contents.
Senders can optionally password-protect a note, set an expiration time, attach files, or trigger self-destruction immediately after the first read, and a command-line interface lets developers create notes directly from a terminal.
Pricing
Enclosed is entirely free to use at the public enclosed.cc instance, with no paid tiers or subscription plans.
The source code is released under the Apache License 2.0 and published on GitHub with an official Docker image, so anyone can self-host their own private instance at the cost of their own infrastructure.
Key Features
Client-side end-to-end encryption — Notes are encrypted in the browser with AES-GCM (256-bit key, PBKDF2 derivation) before ever reaching the server.
Zero-knowledge server design — The server stores only encrypted ciphertext and never has access to decryption keys or plaintext content.
Self-destructing notes — Notes can be configured to delete permanently after being read once or after a set expiration time.
Password protection — Senders can add an additional password requirement on top of the encrypted link for extra security.
Simple, minimalist interface with low learning curve
Self-hostable via Docker for full data control
Cons
Maintained by a small independent project rather than a company, with no formal SLA or support guarantees
No built-in team or organization management features
Lacks integrations found in commercial secret-sharing tools (e.g., enterprise SSO)
Relies on the recipient understanding the link expires or self-destructs, which can cause accidental data loss if misunderstood
Pricing
Hosted (enclosed.cc) Free N/A
Self-Hosted Free (open source) N/A
Frequently Asked Questions
Is Enclosed free to use?
Yes. Enclosed is completely free at the public enclosed.cc instance, and self-hosting the open-source Docker image is also free aside from your own infrastructure costs.
How does Enclosed keep notes secure?
Enclosed encrypts notes in the sender's browser using AES-GCM with a 256-bit key derived via PBKDF2 before sending anything to the server, so the server never has access to the plaintext content or decryption key.
Can I self-host Enclosed?
Yes. Enclosed is open source under the Apache License 2.0 and publishes an official Docker image (corentinth/enclosed) for self-hosting.
Who built Enclosed?
Enclosed was built by French software engineer Corentin Thomasset and launched publicly on Product Hunt in October 2024.
Does Enclosed have a CLI?
Yes. Enclosed includes a command-line interface so developers can create and share encrypted notes directly from a terminal.
What are alternatives to Enclosed?
Similar self-destructing, encrypted note-sharing tools include PrivNote, Yopass, and OneTimeSecret.