A minimalist open-source pastebin where the server has zero knowledge of pasted data. Content is encrypted and decrypted entirely in the browser using 256-bit AES-GCM before anything touches the server, with the decryption key stored only in the URL fragment.
PrivateBin
privatebin.infoA covered pick. Anyone can use it as a private drop-in, with no setup or know-how. Enough for most people. Threat levels
The zero-knowledge design is the real thing: the decryption key lives in the URL fragment, which browsers never send to the server, so even a fully cooperative server operator cannot read your paste. Supports burn-after-reading, expiration timers, and optional password protection for a second layer. The self-hosted PHP backend is straightforward to deploy. Worth noting: the server still logs access times and IP addresses for any URL, just not the content. For sharing sensitive text without trusting a third-party service, PrivateBin is the benchmark.
Measures the security configuration of the tool's own website, not the privacy of the product itself. A strong tool can still score low here.
PrivateBin alternatives
* Average ratings will show on this page once the threshold of 5 ratings is reached.