scrt.link vs Yopass
Both are open source and genuinely end-to-end encrypted. The difference is scale, expiration, and what you get without a licence.
Yopass is a good tool and we will not pretend otherwise. It encrypts with OpenPGP in the browser, the decryption key never reaches the server, and it is Apache-2.0 licensed. If you want a small Go binary to self-host, it is a strong choice.
The honest differences are practical rather than philosophical. Yopass caps uploads at 1 MB without a paid licence and offers exactly three expiration options — 1 hour, 1 day, 1 week. Its branding, OIDC login, audit logs, read receipts and webhooks now sit behind a €149/year business licence.
scrt.link is a hosted product with the same zero-knowledge model: files up to 100 GB, expiration from 10 minutes to 30 days, view limits up to 1,000, and accounts and teams built in.
Feature comparison
| Feature | scrt.link | Yopass |
|---|---|---|
End-to-end encrypted in the browser | ||
Decryption key never reaches the server | ||
Open source | Yes (MIT) | Yes (Apache-2.0) |
Self-hostable | ||
File sharing | Up to 100 GB | 1 MB without a licence |
Text secret size | Up to 100,000 characters | 10,000 characters (default) |
Expiration | 10 minutes – 30 days | 1 hour, 1 day or 1 week |
Configurable view limit | Up to 1,000 views | One-time on/off |
Password protection | Yes (paid plans) | |
Read receipts | Yes (paid plans) | Licence required |
Custom branding / white-label | Yes (Business) | Licence required |
Hosted service with accounts & teams | ||
File requests (receive secrets) | Licence required | |
REST API | ||
Official CLI | Yes (@scrt-link/cli) | |
Browser extension | Chrome & Firefox | None official |
Works without an account |
Facts about Yopass last verified on July 14, 2026. Products change — if something here is out of date, let us know and we'll fix it.
Key differences
The security model is the same — that is the point
Both tools encrypt in the browser and keep the key out of the server. Yopass uses OpenPGP, scrt.link uses AES-GCM via the Web Crypto API. If your only requirement is "the server must not be able to read this", Yopass meets it, and we would rather say so than invent a difference.
Open core, and where the line falls
Yopass has moved to an open-core model: a €149/year business licence gates custom branding, OpenID Connect, audit logging, read receipts, webhooks, secret requests — and lifts the 1 MB upload cap. That is a fair way to fund the work, but it means the free edition is more limited than it first appears.
Files, and how big they get
Without a licence Yopass caps uploads at 1 MB, which rules out most real files — a database dump, a design archive, a set of client documents. scrt.link handles files up to 100 GB, encrypted in the browser and streamed, on the same one-time links.
Expiration windows
Yopass offers three fixed options: 1 hour, 1 day, 1 week. That is often enough, but not when a contractor needs the credential on Monday and it is Friday, or when you want a link that dies in 10 minutes. scrt.link runs from 10 minutes up to 30 days.
Which one should you use?
Choose scrt.link if…
-
You need to send real files, not just a 1 MB payload.
-
You want expiration windows shorter than an hour or longer than a week.
-
You want branding, read receipts and file requests without buying a licence.
-
You want a hosted service with accounts and teams rather than something to operate yourself.
Choose Yopass if…
-
You want to self-host a single, small Go binary and be done with it.
-
Apache-2.0 matters to you, or you want OpenPGP specifically.
-
You never need to send more than 1 MB, and 1h/1d/1w covers your needs.
-
You want zero accounts anywhere in the system, by design.
Frequently asked questions
Got a Question?
Whether you need help choosing a plan, have a technical question, or want to discuss a custom setup — we’re here to help. No bots, no ticket queues. You’ll hear back from a real person.