SharePass is a secure data-sharing platform that enables encrypted transmission of confidential information and files through time-controlled, access-limited links. The platform employs client-side AES-256 GCM encryption with a zero-knowledge architecture, generating encrypted URLs that decrypt on recipient devices using keys embedded in the links. Technical capabilities include configurable access controls such as PIN protection, expiration dates, IP restrictions, hardware security key authentication (NFC or biometric), post-sharing modification of restrictions, and an "envelope mode" for collecting data from external parties. The service is accessible through a web application, mobile application with an integrated keyboard extension, and browser extension with inline context menu sharing, supporting multiple distribution channels including email, chat, and SMS.
The platform provides a RESTful API that enables developers to create and manage secrets of various types—including password, message, credentials, QR, and custom JSON objects—with properties such as one-time links, time-to-live, IP address restrictions, availability windows, owner lock, and PIN protection. Authentication is performed primarily with JWT user access tokens, with optional API key support for certain endpoints. The API includes a public view endpoint allowing recipients to retrieve secrets via SharePass links without requiring an account, returning encrypted data and metadata in JSON format. Integration capabilities include webhook alerts and SAML-based Single Sign-On for services such as Office 365 and Google Workspace. Enterprise deployments offer dedicated AWS instances with geo-specific placement, custom branding, unlimited storage, and private hosting options, supported by a centralized administrative dashboard with activity logging, audit trails, user role management, template-based sharing policies, and an AI-powered content inspection module for detecting sensitive material.
