Secret-link mode
AnonPaste generates a random key and places it after the # in the complete link. Browsers do not send that fragment to the server, so recipients need the complete link to decrypt.
Encrypted pastebin for private text sharing
Encrypt text or code in your browser using a complete Secret link or a password. No account required.
Want all features?
This page is for encrypted text only. For text + files, polls, embeds, tags, and more, use the main paste creator.
Encrypted pastebin for private text sharing
Password mode
Your password derives the browser encryption key. Send the paste link and password separately when that better matches your sharing workflow.
What the browser and server handle
New encrypted pastes use a versioned AES-256-GCM envelope with fresh random IVs. The browser encrypts content before upload; the server stores encrypted values plus the visible information needed to deliver and operate the paste.
Expiry, deletion, and recovery
Expiry and burn-after-view control how long the stored paste remains available. They cannot erase copies a recipient already made. AnonPaste cannot recover a lost Secret link key or password.
Encrypted paste questions
Can AnonPaste decrypt the encrypted content?
The server does not receive the Secret-link fragment key or your password. It stores the encrypted payload and the visible operational fields described in the encryption specification.
Can a lost key or password be recovered?
No. Keep the complete Secret link or password. Losing it means the encrypted content cannot be recovered through AnonPaste.
Does encryption hide every detail?
No. Encryption protects the content fields covered by the envelope, but delivery, abuse prevention, expiry, and service operation require some visible fields and request metadata.
Can encryption stop a recipient from copying the text?
No. A recipient who can decrypt and read content can copy it, save it, or take a screenshot. Share only with people you trust.
AnonPaste is a user-generated content hosting service. The platform and its operators are not responsible for content posted by users.