@pwpush

Securely communicate passwords, data & files. Secret URLs expire after X views or X days. Track with Audit Logs. #OSS My personal account: @pglombardo

 In your Docker host
pwpush.com/
Joined July 2020
  • Tweets1K
  • Following43
  • Followers258
247Media
Self-Hosted Pro v1.8.0 ships 14 color themes. Pick your instance's color skin in the Admin Center — Cerulean, Minty, Pulse, Zephyr, and 10 more. Layout and fonts stay fixed. Each user still controls light/dark mode. #PasswordPusher
39
OSS Password Pusher v2.16.2 is out. Two self-hosting improvements: • PWP__TRUSTED_PROXIES now accepts CIDR ranges (thanks @rennf93) • One-click Railyard deploy button (thanks @almokhtarbr) github.com/pglombardo/Passwo…

Release v2.16.2: Trust CIDR ranges in PWP__TRUSTED_PROXIES · pglombardo/PasswordPusher

📝 What’s Changed Add a one-click deploy button for Railyard (#4968) @almokhtarbr Trust CIDR ranges in PWP__TRUSTED_PROXIES (#4957) Thanks @rennf93! ⬆️ Dependencies updates ⬆️ Bump net-sftp from ...

github.com
36
🔧 Scheduled maintenance in progress — server updates, patching & security checks. All systems currently operational. Live status: status.pwpush.com/
29
OSS Password Pusher v2.16.1 is out 🔖 ↳ Updated to Ruby 4.0.9 Update your self-hosted instance: docker compose pull && docker compose up -d github.com/pglombardo/Passwo…

Release v2.16.1: Update to Ruby 4.0.9 · pglombardo/PasswordPusher

📝 What’s Changed Update to Ruby 4.0.9 (#4969) @pglombardo, Peter Giacomo Lombardo ⬆️ Dependencies updates ⬆️ Bump postcss from 8.5.30 to 8.5.31 (#4959) @dependabot[bot] ⬆️ Bump browserslist from...

github.com
31
BTW thanks to Cedric (cguard on Github) for the initial prometheus idea & implementation! github.com/cgrard

cgrard - Overview

cgrard has 18 repositories available. Follow their code on GitHub.

github.com
Password Pusher@pwpushOct 22
OSS Password Pusher v2.16.0 is out → native Prometheus metrics. Self-hosters can now scrape push/request activity into any Prometheus-compatible monitoring stack. 📖 docs.pwpush.com/docs/oss-pro…

Prometheus Metrics

Enable the optional Prometheus exporter in OSS Password Pusher: PWP__PROMETHEUS__ settings, Docker Compose and Helm setup, scrape config, and the pwpush_* metrics reference.

docs.pwpush.com
32
Self-Hosted Pro v1.9.0: - SolidQueue now runs inside Puma (one fewer process) - User agents restored in audit logs - IP spoofing protection for proxy deployments - Email settings nav cleanup Pull the updated container. No config changes needed. docs.pwpush.com/posts/2026-1…

Self-Hosted Pro v1.9.0 — Puma-Embedded Worker, Audit Log Improvements, and Security Hardening

Self-Hosted Pro v1.9.0 consolidates the background worker into the Puma web process, restores user agents on audit logs, and closes a client IP spoofing vector in deployments behind a reverse proxy.

docs.pwpush.com
22
OSS Password Pusher v2.16.0 is out → native Prometheus metrics. Self-hosters can now scrape push/request activity into any Prometheus-compatible monitoring stack. 📖 docs.pwpush.com/docs/oss-pro…

Prometheus Metrics

Enable the optional Prometheus exporter in OSS Password Pusher: PWP__PROMETHEUS__ settings, Docker Compose and Helm setup, scrape config, and the pwpush_* metrics reference.

docs.pwpush.com
1
1
1
60
For the record, Password Pusher (or any application, tool or CLI by us) does NOT use PHP. Still, it's always best to make sure you update to the latest released version to gain latest updates & security patches. We will soon include an in-app notification for new releases.
1
92
Password Pusher retweeted
Cloudzy
@cloudzyvpsOct 20
Yes! Password Pusher is now available on a VPS with a single click through Cloudzy Marketplace. Deploy here 👇 cloudzy.com/marketplace/pass…

Deploy Password Pusher on Cloudzy VPS · 1-click install

Password Pusher shares passwords, notes, files, and URLs through one-time links that expire after a set number of views or a set

cloudzy.com
Password Pusher@pwpushOct 12
OSS Password Pusher now deploys to 8 platforms — Cloudzy, Elestio, PikaPods, DigitalOcean, Render, Heroku + Railway and Fly.io. Pre-configured for production out of the box. github.com/pglombardo/Passwo…

Fly.io | Deploy apps and agents on fast, hardware-isolated VMs

Deploy apps, agents, and databases on fast, hardware-isolated VMs. Pay only for the seconds they run. Sign up free.

fly.io
1
4
118
I would think this is good for security teams. Gonna try soon.
Peter Giacomo Lombardo
@pglombardoOct 19
This may be my next purchase. Glacier helps ensure your device hasn't been tampered with or exposed to hidden threats. VPN/Secure DNS & more. Detects jailbreaks, hacking tools. 😎 theglacierapp.com/
49
OSS Password Pusher v2.15.1 — GDPR fix: Bootswatch themes were loading fonts from remote servers. Now bundled locally. (Thanks @OXERY) OTP throttling also tightened. Update: github.com/pglombardo/Passwo…

Release v2.15.1: GDPR Fix & Improved Throttling · pglombardo/PasswordPusher

Thanks to @OXERY who pointed out that some of the Bootstrap themes were loading fonts remotely. This has been now fixed - all theme fonts are packaged locally in the application. 📝 What’s Changed ...

github.com
1
42
The OSS Docker "stable" tag has been moved up to v2.14.3 github.com/pglombardo/Passwo…

Release v2.14.3: Security Release - Fix Login Throttle Bypass · pglombardo/PasswordPusher

📝 What’s Changed Reject unknown push kinds without a 500 (#4906) @pglombardo, Peter Giacomo Lombardo Close the sign-in throttle bypass (#4897) Thanks @nullbenny for reporting! ⬆️ Dependencies upd...

github.com
1
35
One more. OSS Password Pusher is now on @hostinger's marketplace. Hostinger handles deployment and infrastructure — production-ready out of the box. → hostinger.com/applications/p…
38
OSS Password Pusher now deploys to 8 platforms — Cloudzy, Elestio, PikaPods, DigitalOcean, Render, Heroku + Railway and Fly.io. Pre-configured for production out of the box. github.com/pglombardo/Passwo…

Fly.io | Deploy apps and agents on fast, hardware-isolated VMs

Deploy apps, agents, and databases on fast, hardware-isolated VMs. Pay only for the seconds they run. Sign up free.

fly.io
1
5
233
🔒 OSS Password Pusher v2.14.3 — security release Login throttle bypass fixed (GHSA-fqjh-4mch-2vw4): URL format suffixes like /sign_in.json bypassed rate limiting entirely. Thanks @nullbenny for reporting. Self-hosters: update now. github.com/pglombardo/Passwo…

Release v2.14.3: Security Release - Fix Login Throttle Bypass · pglombardo/PasswordPusher

📝 What’s Changed Reject unknown push kinds without a 500 (#4906) @pglombardo, Peter Giacomo Lombardo Close the sign-in throttle bypass (#4897) Thanks @nullbenny for reporting! ⬆️ Dependencies upd...

github.com
1
37
OSS Password Pusher v2.14.2 released — dark theme CSS fix (thanks @resfork!), dependency & security updates. docker pull pglombardo/pwpush:latest github.com/pglombardo/Passwo…

Release v2.14.2: Dependency & Security Updates; CSS Fix · pglombardo/PasswordPusher

📝 What’s Changed Hide floating-label placeholders in the dark theme (#4899) Thanks @resfork! Align development Ruby with the 4.0.7 Alpine images (#4886) @pglombardo, Peter Giacomo Lombardo Fix fla...

github.com
3
38
The OSS Docker "stable" tag has moved to v2.14.1 — dependency & security updates. docker pull pglombardo/pwpush:stable github.com/pglombardo/Passwo…

Release v2.14.1: Dependency & Security Updates · pglombardo/PasswordPusher

📝 What’s Changed Use gettext for remaining password generator strings (#4859) @pglombardo, Peter Giacomo Lombardo ⬆️ Dependencies updates ⬆️ Bump browserslist from 4.29.0 to 4.29.1 (#4865) @depe...

github.com
1
30
Self-Hosted Pro v1.6.0: fail-closed boot on decryption errors, Host-header injection protection, audit log rate limiting, server-side password generator with admin controls. docs.pwpush.com/posts/2026-1…

What We Hardened in Self-Hosted Pro This Month

A rundown of the security, reliability, and feature improvements shipped in Self-Hosted Password Pusher Pro v1.6.0 — from fail-closed boot to a server-side password generator.

docs.pwpush.com
1
45
Password Pusher retweeted
Peter Giacomo Lombardo
@pglombardoOct 1
v1.6.0 Self Hosted Pro ships a batch of security, reliability, and feature improvements — fail-closed boot on decryption errors, Host-header and null-byte injection protection and more. docs.pwpush.com/posts/2026-1…

What We Hardened in Self-Hosted Pro This Month

A rundown of the security, reliability, and feature improvements shipped in Self-Hosted Password Pusher Pro v1.6.0 — from fail-closed boot to a server-side password generator.

docs.pwpush.com
1
36
The OSS Docker "stable" tag has been moved up to v2.13.0 github.com/pglombardo/Passwo…

Release v2.13.0: Passphrases, Random Passwords, and PIN Generation · pglombardo/PasswordPusher

The built-in password generator has been completely rebuilt with three modes: Passphrase — Word-based passwords in five languages (English, Spanish, French, German, Italian). Configurable word cou...

github.com
2
50
Load more