Bottom line: InPrivy is a browser-based tool for sending passwords, notes and files as secure links that are voided once opened, or after the limits you set. It also gives you a Public Sharing URL so clients can send secrets back to you. It’s made by ivy.mayhem, a small German company, and its own site says data sits on servers in Germany. AppSumo sells one plan, $39 once, and the overview says it’s InPrivy’s “Business” plan. InPrivy’s own site sells Business for €129 once, so the deal is the cheaper route. Two catches. The AppSumo card doesn’t list API Access, which InPrivy’s own Business plan does. And InPrivy is a courier, not a vault: the founder says keeping secrets around for long periods “defeats its purpose.” The listing is “Not covered by We Got Your Back,” though it’s refundable for 60 days.
Best for: IT providers, agencies, accountants and freelancers who swap logins and documents with clients and want branded, self-destructing links.
Think twice if: you need a password manager, an API you can build on today, or end-to-end encryption you can verify.
We have no affiliate deal with InPrivy or AppSumo; links go to the official pages. How we review.
Updated 29 October 2026. This InPrivy review rests on what we read that day: the InPrivy listing on AppSumo, including the plan card, the deal terms, recent questions and reviews, plus InPrivy’s own site and pricing and its help page on encryption. We haven’t sent secrets through it, so we describe the plan, the limits and what buyers report, not how it behaves in daily use.
InPrivy review at a glance
| What we checked | What the pages say |
|---|---|
| AppSumo plan | $39 once, 1 code; the listing shows $150 struck through |
| Stacking | “This deal is not stackable” |
| InPrivy’s own lifetime plans | Solo €49, Business €129, once, “plus local taxes” |
| Storage and log | 30 GB attachments, 90-day history log |
| Team | “Team Management (Unlimited Members)” |
| API Access | On InPrivy’s Business plan; not listed on the AppSumo card |
| Refund | “Refundable up to 60 days” |
| AppSumo guarantee | “Not covered by We Got Your Back” |
| Listing rating | 4.92 stars from 72 reviews, 194 questions |
What InPrivy does
When you write a “secret” in your dashboard (a password, an API key, a note, or a file), InPrivy turns it into a link. By default the link works once and is then voided, and the overview says more options are available, such as expiry dates. InPrivy’s own customer quotes mention setting a number of downloads and adding a second password. You can track when a secret was opened and who opened it, sort secrets into folders and work in a team.
The AppSumo card lists these lines, word for word:
- Unlimited Secrets and Folders
- Attachments (30 GB Storage)
- Custom Branding, Custom Domain and Custom Translations
- History Log (90 days)
- Public Sharing URL
- Extended Link Details and QR Codes
- Team Management (Unlimited Members)
- Notifications and Password Protection
- TOTP Two-Factor Authentication and Strong Encryption
The Public Sharing URL is the feature buyers mention most. It’s a page you send to a client, and whatever they type or attach lands in your InPrivy Inbox. InPrivy’s FAQ adds that open notifications can go out by email and webhook, that support runs through an in-product chat in English and German, and that its servers are in Germany “with ISO 27001 certification.” There’s a 20-day free trial on InPrivy’s own site, with “No payment information required.”
The thing most people miss: it’s built to forget
Turns out the most useful sentence on the listing is a founder answer. On 23 October 2026 a buyer asked whether InPrivy could be used to share API keys with team members. The founder replied within minutes: “I don’t see a reason why not. But keep in mind that InPrivy is meant for temporary storage and keeping your secrets available for long periods of time defeats its purpose.”
InPrivy’s own FAQ says the same thing more bluntly. Asked “Is this a password manager?”, it answers “Not at all.” Its help page explains that once a secret is voided “the actual secret does not exist anymore. It is fully deleted without any chance of restoring it.” So when you’re picturing a shared team vault where everyone looks up the Wi-Fi password, this isn’t it. Honestly, that’s a feature for the job it does. A link that dies after one view can’t leak from someone’s inbox next year.
The second thing most people miss is the API. InPrivy’s own pricing page lists “API Access” as included on Business and not on Solo, and its homepage says “Manage secrets via our API however you like.” The AppSumo overview says the deal is the “Business” plan, yet the AppSumo card lists no API line at all. On 21 October 2026 a buyer asked whether there’s a supported API or webhook path to create, expire and audit shares. We found no answer on the listing when we read it eight days later. If you’ve got an automation plan, ask support in writing before day 60 whether your code includes the API.
The plan
There’s one code, and you can’t stack it.
| Plan | Price |
|---|---|
| Single code Teams sharing client logins and files |
$39 once |
One-time price on AppSumo, read 29 October 2026; the listing shows $150 struck through and the deal is not stackable. InPrivy's own site sells Solo for €49 and Business for €129 once, plus local taxes, with a 20-day free trial.
Prices checked Oct 29, 2026 on InPrivy’s own pricing page. Lifetime deals are listings that can end or change, so check the live listing before you buy.
The card shows $39, with $150 struck through. That $150 is the listing’s own “was” figure; we don’t treat it as a saving. The terms promise “All future InPrivy – Secure and easy sharing Plan updates,” which is generic wording and doesn’t name a plan on InPrivy’s site. The founder’s launch note from November 2021 goes further: “All features we may add in the future will always be available to you.” In practice, the founder’s note is a promise in a post, while the terms are what AppSumo enforces. If you’ve bought lifetime deals before, you’ll know why that gap matters; keep a copy of both.
Picking a plan: three worked examples
There’s only one plan, so the useful check is whether its limits fit the way you work. Here are some sums from the card.
A five-person IT shop onboarding clients. Say you onboard eight clients a month, and each needs three logins sent to them: 24 secrets a month, or 288 a year. Secrets are unlimited on the card, and so are team members, so all five staff can send from one account. The limit you’ll feel is the 90-day history log. If a client asks in month five when they opened a link, that record may be gone. Don’t forget to note anything you need for audit outside InPrivy.
A bookkeeper collecting documents. Each client sends a month of scanned receipts through your Public Sharing URL, about 25 MB per packet. Forty clients is 1,000 MB, roughly 1 GB a month, against 30 GB of storage. The help page says a voided secret is “fully deleted,” which suggests the space comes back, but neither page explains how the 30 GB is counted. Even if nothing were freed, 30 GB at 1 GB a month lasts about two and a half years. Don’t bother deleting old packets by hand until support tells you how the meter works.
A freelancer who just needs one-off password handovers. Ten handovers a month is trivial on any plan. The case here is branding: your own domain, logo and colours on the sharing page. InPrivy’s Solo plan has those too, at €49 on its own site, without team features or API.
The deal vs buying direct
InPrivy’s own pricing page, read on 29 October 2026, says “Pay once. Use forever.”
| InPrivy’s own plan | Price | Workspaces | Storage | History log | API and teams |
|---|---|---|---|---|---|
| Solo | €49 once, plus local taxes | 1 | 10 GB | 45 days | Not included |
| Business | €129 once, plus local taxes | 3 | 30 GB | 90 days | Included |
| AppSumo deal | $39 once | Not stated on the card | 30 GB | 90 days | Teams yes, API not listed |
The deal matches Business on storage, log length and team size. It costs less than even the Solo plan’s figure. Most people miss that the currencies differ and InPrivy adds local taxes, so compare totals at checkout. The two gaps are the missing API line and the workspace count. One June 2026 reviewer says they created a workspace “to separate business from personal use,” so at least one workspace is there; the card doesn’t say how many.
Honestly, for the sharing job alone, $39 is a low price for a tool whose own Business plan costs €129. If the API is the reason you’d buy, it’s the one question to settle first.
What buyers report
The listing shows 4.92 stars from 72 reviews. Most recent reviews are five stars, and the dated ones say a lot.
Quick to set up. A July 2026 reviewer had it “purchased, setup and sending in under 15 minutes.” An August 2026 review reads simply “Just works,” and praises white labelling and client links “for receiving sensitive login credentials.”
Receiving files wasn’t obvious. In June 2026 a reviewer said they couldn’t find a way for clients to send files back. The founder replied the same day, pointing to the Public Sharing URL in the “Domain” settings, where clients “can then create secrets for you (text and files).”
A narrow tool, by choice. An October 2026 four-star review says they use it “for a narrow job” when a full client portal would be overkill, and value the branded custom domain. Their wish was the API and webhook path above.
Some hard questions are answered by buyers, not the vendor. On 12 October 2026 one buyer asked whether files are encrypted client-side with zero-knowledge encryption, and whether PDFs open in the browser without a download. Another buyer, not the founder, answered on 16 October. They weren’t sure about the encryption, and they tested a PDF: “it’s not Browser-View. It’s a direct download.” The same buyer said there had been a message “at the end of September” that the team was busy with client projects. Don’t skip that thread if your clients expect a preview instead of a download. A UK buyer’s question about data location, also from 12 October, was likewise answered by a fellow buyer.
A September 2026 reviewer adds that, from their own research, InPrivy is built by “a Hamburg-based company” and stores data on German servers “via Hetzner.” InPrivy’s site confirms Germany and ISO 27001; we didn’t see the hosting provider named there.
What the encryption page actually says
InPrivy’s help page says secrets are encrypted with AES-256 when you save a draft, stay encrypted in the database, and are decrypted “just for” the person viewing. Its FAQ says values are encrypted “using OpenSSL and the AES-256-CBC cipher” and signed with a message authentication code. Both pages say “neither we nor anybody else” has access to your secrets.
What neither page says is that encryption happens in your browser before upload, and neither uses the term zero-knowledge. That’s the question the October buyer asked, and it’s still open on the listing. When you’re sharing a client’s server password, the vendor’s description may be enough. If you’re sharing investor documents or regulated data, ask support to describe where the keys live, and decide from that.
The terms
The deal terms read:
- “Lifetime access to InPrivy – Secure and easy sharing Plan”
- “You must redeem your code(s) within 60 days of purchase”
- “All future InPrivy – Secure and easy sharing Plan updates”
- “Please note: This deal is not stackable”
Under them: “60 day money-back guarantee. Try it out for 2 months to make sure it’s right for you!” The plan card adds “Refundable up to 60 days” and “Not covered by We Got Your Back. Listed by the partner, not reviewed by AppSumo.” The listing has run since November 2021 and shows no end date, but that isn’t a promise it stays up.
InPrivy vs a password manager and free one-time-link tools
The listing doesn’t name alternatives. The two obvious ones are a team password manager and the free one-time-link sites. A password manager stores secrets for the long term and often has its own sharing feature; we didn’t read or price any for this review. InPrivy’s own FAQ draws the line itself: it’s “Not at all” a password manager. Free one-time-link sites do the core trick at no cost. InPrivy’s homepage argues against them, warning that free tools are “often bloated with ads,” and offers its own free “light version.” Where InPrivy differs is the business layer: your own domain and branding, team members, folders, a history log and a page for clients to send secrets to you. If you only send a password to yourself once a month, skip the paid plan.
Common mistakes with the InPrivy deal
Treating it as a vault. Secrets are meant to be voided. Keep long-term credentials in a password manager.
Assuming the API is included. The AppSumo card doesn’t list it. Don’t trust a plan name alone; get a written answer before day 60.
Buying for end-to-end encryption. The pages describe AES-256 at rest, not client-side encryption. Ask if it matters to you.
Expecting in-browser PDF previews. One buyer’s test found PDFs download directly.
Planning to stack codes. The deal is not stackable; one code is all you get.
Forgetting the 90-day log. If you need proof of who opened what beyond 90 days, record it elsewhere.
Who InPrivy suits
An IT provider or agency. Branded links for handing over logins, and a client page for receiving them.
An accountant or law office. A private drop box for client documents, hosted in Germany per InPrivy’s site.
A small team. Unlimited members on one $39 code.
A developer building automations. Skip the deal until you’ve had a clear answer on the API.
How to test it inside the refund window
- Send a test secret to your own phone, open it, and check it’s voided.
- Set up your Public Sharing URL in the Domain settings and send yourself a file through it.
- Connect your custom domain and logo, since one buyer notes public sharing needs a CNAME subdomain.
- Ask support, in writing, whether your code includes API Access and how many workspaces you have.
- Turn on open notifications by email or webhook and confirm they arrive.
What we couldn’t check
We didn’t create secrets, upload files or test the encryption. We couldn’t confirm whether the AppSumo code includes API Access, how many workspaces it carries, how the 30 GB is counted, or whether files are encrypted before they leave your browser. We also couldn’t see the full answer history behind the 194 questions. Settle the first two before day 60.
FAQ: InPrivy questions
Is InPrivy a one-time payment on AppSumo?
Yes. It’s $39 once for a single code, and the deal is not stackable.
Is the AppSumo deal cheaper than buying InPrivy directly?
On the pages we read, yes. InPrivy sells Business for €129 and Solo for €49, once, plus local taxes. The AppSumo card doesn’t list API Access, which InPrivy’s Business plan includes.
Is InPrivy a password manager?
No. InPrivy’s FAQ says “Not at all.” Secrets are shared as links and voided, and the founder says long-term storage “defeats its purpose.”
Where does InPrivy store data?
InPrivy’s site says its servers are in Germany, with ISO 27001 certification, and that it’s GDPR compliant.
The verdict
InPrivy does one job: getting a password or a file to someone, or from them, without leaving it in an inbox for years. The AppSumo code is far cheaper than InPrivy’s own Business plan, carries the same storage, log and team limits, and has a 60-day refund window. Ask about the API before you rely on it, don’t treat it as a vault, and question the encryption model if your data is sensitive enough to need that answer. If you’ve got clients sending you logins every week, it’s an easy buy at $39; when you only need the odd one-off link, a free tool will do.
InPrivy on our desks
Our YouTube channels cover InPrivy from different angles. Each video opens on YouTube.
