How it works
Your data is end-to-end encrypted. No one can read it without the password.
01
Create a paste
A random 6-digit ID is generated. You get a private editor page.
02
Write & encrypt
When you save, your browser generates a random password, derives an AES-256-GCM key from it and the ID, and encrypts your content locally. The raw text never leaves your device.
03
Store encrypted
Only the encrypted ciphertext is sent to the server and stored. Even if someone gains access to the database, they see only unreadable gibberish.
04
Share & decrypt
The share link includes the password in the URL fragment (everything after #). This fragment is never sent to the server — it stays in the receiver's browser. Their browser fetches the encrypted data and decrypts it locally.