// 0x6a_v1.0
Logo
← cd ../notes

paste: a pastebin that can't read your pastes

//Project, Privacy, Cryptography, Next.js

paste

pastebin.0x6a03448f4d.com is an encrypted pastebin where the server never sees your plaintext. I built it with AI help, but the design and the security choices are the interesting part, so let me explain them plainly.

How it works

  1. You type some text. It is encrypted in your browser with AES-256-GCM.
  2. Only the encrypted blob is uploaded. The server stores it and nothing else.
  3. The decryption key is placed in the link, after the #. Browsers never send that part to a server.
  4. To read a paste, the key comes from the link and the text is decrypted back in the browser.

So the server only ever holds ciphertext. It cannot read your paste, and neither can I.

Extras

  • Burn after reading: the paste is deleted the first time it is opened.
  • Auto-expiry: pick how long it lives, from five minutes to thirty days.

Is it safe?

For sharing text privately, yes. The server never runs or reads what you paste; the content is just encrypted data. Nothing is perfect, so I keep the honest limits in the project's README, but the core promise holds: lose the link, lose the data, and the server never saw it in the first place.

Try it: pastebin.0x6a03448f4d.com