Understand your personal finances. Forget Excels, try Whisper Money.
Go to file
Víctor Falcón 370d388d99
feat: Enable email verification on sign up (#97)
## Summary
- Enables `MustVerifyEmail` on the `User` model so new users must verify
their email before accessing protected routes
- Unverified users are redirected to `/email/verify` when attempting to
access routes behind the `verified` middleware (subscribe, onboarding,
dashboard)
- A verification email is automatically sent on registration via Fortify

## Screenshot

![Email verification
page](https://raw.githubusercontent.com/whisper-money/whisper-money/mail-verification/storage/videos/email-verification-page.png)

## Video


https://github.com/whisper-money/whisper-money/raw/mail-verification/storage/videos/ac0945c527f014b9cd657f18c911f496.webm

## Test plan
- [x] New test: registration sends a `VerifyEmail` notification
- [x] New test: newly registered users have `email_verified_at` as null
- [x] New test: unverified users are redirected to `verification.notice`
from protected routes (subscribe, onboarding, dashboard)
- [x] New test: verified users are not redirected to verification notice
- [x] Existing email verification and notification tests still pass (31
auth tests, 52 settings tests)
- [x] Browser walkthrough: registration → redirected to `/email/verify`
page with "Resend verification email" button
2026-02-03 10:15:07 +01:00
.claude/skills chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
.cursor chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
.github fix: Prevent automerge when CI checks have failed (#95) 2026-02-02 08:58:47 +01:00
.opencode/skills chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
app feat: Enable email verification on sign up (#97) 2026-02-03 10:15:07 +01:00
bootstrap Add Budgeting Feature to Track and Manage Spending (#36) 2026-01-21 15:25:50 +01:00
config feat: New discord offer 2026-01-10 10:27:32 +01:00
database feat: Load transactions history on budget created (#72) 2026-01-22 11:10:15 +01:00
docker chore: Fix caddy container 2026-01-17 20:02:14 +01:00
public feat: Improve PWA standalone experience and redirect to dashboard (#90) 2026-02-01 11:33:10 +01:00
resources feat: Enable email verification on sign up (#97) 2026-02-03 10:15:07 +01:00
routes refactor: Simplify transaction endpoints architecture (#76) 2026-01-25 16:15:17 +01:00
src/lib/crypto E2E Encryption 2025-11-07 14:21:25 +00:00
storage feat: Enable email verification on sign up (#97) 2026-02-03 10:15:07 +01:00
templates/coolify fix: auto-regenerate APP_KEY if invalid format (missing base64: prefix) 2025-12-30 07:22:19 +01:00
tests feat: Enable email verification on sign up (#97) 2026-02-03 10:15:07 +01:00
traefik feat(traefik): Add secure headers middleware to WhisperMoney service 2025-11-14 09:17:09 +01:00
.editorconfig Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
.env.example feat: Add PostHog (#70) 2026-01-20 10:47:59 +01:00
.env.production.example Add production Docker setup for easy self-hosting with the CI-built image (#42) 2025-12-30 07:22:19 +01:00
.gitattributes Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
.gitignore feat: Automated setup script for local deployment (#58) 2026-01-16 15:57:12 +01:00
.mcp.json chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
.php-cs-fixer.dist.php Execute browser tests on CI (#10) 2025-12-03 16:26:30 +01:00
.prettierignore Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
.prettierrc Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
.release-it.json feat: add version tracking with git tags and changelog 2025-12-30 07:22:19 +01:00
AGENTS.md chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
CHANGELOG.md chore: release v0.1.9 2026-01-28 21:30:14 +01:00
CLAUDE.md chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
Caddyfile chore: Fix caddy container 2026-01-17 20:02:14 +01:00
Dockerfile chore: Simplify IndexedDB sync by moving to Inertia shared props (#63) 2026-01-19 19:15:26 +01:00
Dockerfile.production feat: Automated setup script for local deployment (#58) 2026-01-16 15:57:12 +01:00
LICENSE.md Add Creative Commons license 2025-11-26 17:07:20 +01:00
README.md chore: Update README to make it clearer that whispermoney install command must be run first 2026-01-27 12:09:35 +01:00
artisan Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
boost.json chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
bun.lock feat: Replace user avatar with Facehash faces (#86) 2026-02-01 11:33:09 +01:00
components.json Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
compose.yaml fix: MYSQL_EXTRA_OPTIONS env var 2026-01-19 18:18:23 +01:00
composer.json chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
composer.lock chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
docker-compose.production.yml Add production Docker setup for easy self-hosting with the CI-built image (#42) 2025-12-30 07:22:19 +01:00
eslint.config.js Y3:0 2025-11-26 12:01:49 +01:00
opencode.json chore: Update larevel boot package 2026-01-27 10:55:46 +01:00
package-lock.json chore: release v0.1.9 2026-01-28 21:30:14 +01:00
package.json feat: Replace user avatar with Facehash faces (#86) 2026-02-01 11:33:09 +01:00
phpunit.xml fix: Check IDOR vulnerabilities (#60) 2026-01-17 09:58:52 +01:00
tsconfig.json Set up a fresh Laravel app 2025-11-07 12:01:36 +00:00
vite.config.ts Push sourcemap to bugsink 2025-12-31 12:56:25 +01:00
vitest.config.ts feat: add multiple chart view modes for net worth evolution (#37) 2025-12-30 07:22:19 +01:00
vitest.setup.ts feat: add multiple chart view modes for net worth evolution (#37) 2025-12-30 07:22:19 +01:00
whispermoney fix: Wrong whispermoney script path 2026-01-16 18:48:44 +01:00

README.md

Whisper Money

Deutsch | Español | français | 日本語 | 한국어 | Português | Русский | 中文

Whisper Money

CC BY-NC 4.0

The most secure way to understand your finances.

Whisper Money is a privacy-first personal finance application that helps you track, categorize, and understand your spending—all while keeping your financial data encrypted and secure.

🎮 Try the Demo: Experience Whisper Money with our demo account - no registration required!

💬 Join our Community: Whether you're a user looking for help or a developer wanting to contribute, we'd love to have you in our Discord server! Share feedback, ask questions, discuss new features, or just hang out with fellow privacy enthusiasts.

Features

  • 🔐 End-to-end encryption — Your financial data stays private
  • 🏦 Bank account management — Track multiple accounts in one place
  • 📊 Transaction categorization — Automatic and manual categorization
  • 🤖 Automation rules — Set up rules to auto-categorize transactions
  • 📈 Financial insights — Understand your spending patterns

Tech Stack

  • Backend: Laravel 12, PHP 8.4
  • Frontend: React 19, Inertia.js v2, TypeScript
  • Styling: Tailwind CSS v4
  • Database: MySQL
  • Cache/Queue: Redis
  • Testing: Pest v4

Running Locally

The easiest way to get started is using our automated setup script:

bash <(curl -fsSL https://whisper.money/setup.sh)

After installation, just visit https://whisper.money.local in your browser.

Manual Setup

If you prefer to set up manually:

  1. Clone the repository:
git clone https://github.com/whisper-money/whisper-money.git
cd whisper-money
  1. Run the setup script:
whispermoney install

Available Commands

Important: You must run whispermoney install before using any other command. If you skip the install step, commands like start will not work.

Once installed, you can use the whispermoney command for common tasks:

# Start all services
whispermoney start

# Stop all services
whispermoney stop

# Upgrade to latest version
whispermoney upgrade

# Interactive menu
whispermoney

Development Server

For active development with hot reloading:

composer run dev

This will concurrently start:

  • PHP development server
  • Queue worker
  • Log viewer (Pail)
  • Vite dev server

The application will be available at https://whisper.money.local or http://localhost:8000 (direct PHP server).

Running with Docker (Production Image)

For testing the production Docker image locally:

  1. Copy the production environment file:
cp .env.production.example .env
  1. Start the services:
docker compose -f docker-compose.production.yml up -d

The application will be available at http://localhost:8080.

To use a different port, set APP_PORT:

APP_PORT=3000 docker compose -f docker-compose.production.yml up -d

Deploying to Coolify

Whisper Money can be easily deployed to Coolify using our Docker Compose template.

Quick Deploy

  1. In Coolify, create a new resource and select Docker Compose
  2. Choose Empty Compose File as the source
  3. Paste the contents from our template: 👉 whisper-money.yaml
  4. Deploy!

The template includes:

  • Whisper Money application container
  • MySQL 8.0 database with health checks
  • Persistent volumes for data and storage
  • Auto-generated database credentials

Required Environment Variables

Variable Description
RESEND_API_KEY Email service API key (for password resets, notifications)

Note: APP_KEY and APP_URL are auto-configured. The container generates an APP_KEY on first startup if not provided.

Optional Environment Variables

Variable Default Description
DRIP_EMAILS_ENABLED true Enable drip emails (welcome, onboarding, feedback)
HIDE_AUTH_BUTTONS false Hide login/register buttons on landing page
SUBSCRIPTIONS_ENABLED false Enable Stripe subscriptions
STRIPE_KEY - Stripe publishable key
STRIPE_SECRET - Stripe secret key
STRIPE_WEBHOOK_SECRET - Stripe webhook signing secret

Star History

Star History Chart

License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.