End-to-End Encrypted

Share secrets.
Keep them secret.

Your content is encrypted in your browser before it ever leaves. We never see your data. The encryption key lives only in your URL.

AES-256 Encryption
Zero Knowledge
100% Client-Side
0 characters

Start typing to see preview

🎉 Link Created!

Share this encrypted link with your recipient

Important: The encryption key is in the URL fragment (#...). Only share the complete link with trusted recipients. We cannot recover it!

Untitled Paste

New Paste

Documentation

Everything you need to know about Paste.ZeroCostEdu

01 Quick Start

1

Enter your content

Type or paste your text, code, or markdown into the editor.

2

Configure options

Choose format, expiration, and optional password protection.

3

Generate link

Click "Create Encrypted Link" to encrypt and generate your URL.

4

Share securely

Share the complete URL with your recipient. The key is in the URL!

02 Security Model

👤
Your Browser
Encrypted
☁️
Our Server
Encrypted
👤
Recipient
🔐

AES-256-GCM

Military-grade encryption used by governments worldwide.

🔑

Key in URL Fragment

The key stays in the # part - never sent to our servers.

🚫

Zero Knowledge

We cannot decrypt your data even if compelled to.

03 Options

⏰

Expiration

Set automatic expiry from 5 minutes to 1 week. Expired pastes become inaccessible and are purged after the configured retention window.

🔥

Burn After Reading

After explicit confirmation, one request atomically retrieves the encrypted payload and removes the active database row.

🔐

Password Protection

Add an extra layer. Recipients need both the link AND password to decrypt.

04 API Reference

POST /api/pastes Create new paste
GET /api/pastes/:publicId Get paste data
POST /api/pastes/:publicId/view Record an ordinary view
POST /api/pastes/:publicId/consume Consume a one-time paste
GET /api/pastes/:publicId/comments List encrypted comments
POST /api/pastes/:publicId/comments Add an encrypted comment

Paste content and comments are encrypted in your browser before upload; the decryption key stays in the URL fragment and never reaches the server. Some metadata (such as an optional title, your chosen options and timestamps) is stored as plaintext.

05 FAQ

Can you read my pastes?

No. Your content is encrypted in your browser before being sent to us. We only store encrypted data and don't have the decryption key.

What if I lose the link?

The link contains the decryption key. Without it, even we cannot recover your data. Always save important links securely.

Is it really free?

Yes! Paste.ZeroCostEdu is completely free with no hidden costs.

Built for Privacy

In a world of data breaches and surveillance, everyone deserves a simple, secure way to share sensitive information.

End-to-End Encryption

Military-grade AES-256-GCM encryption happens entirely in your browser.

Zero Knowledge

We never see your encryption keys. They exist only in the URL fragment.

Self-Destructing

Burn-after-reading and auto-expiration for sensitive one-time shares.

Private & Secure

No tracking, no ads, no third parties. Your data stays yours.

Ready to share securely?

Dashboard

Recent Pastes

ID Title Format Views Flags Created Status Actions

Storage & Database

Monitor database usage and set your alert limits.

Alert Settings

The database can't report your hosting plan's real size limit, so alerts compare your usage against the maximum you set below. Set it to match your database plan so the warnings are accurate.

Expiration Options

Control which time limits appear in the Create form. Disable or delete options to prevent long-lived pastes from filling up storage.

Label Key Duration Sort Status Actions
Loading…

Backups

Download a full copy of your database, or restore from a backup file.

Unlock backup operations

For safety, enter your current password and—when enabled—a current 2FA or backup code. Download and restore stay unlocked for five minutes.

Download backup

Creates one compressed file (.json.gz) with every paste, comment, admin account and setting. Encrypted paste content stays encrypted, but the file does contain admin login hashes — store it somewhere safe.

Restore from backup

Warning: Restoring replaces everything in the database with the contents of the backup file. All current pastes, comments and admin accounts will be permanently overwritten. You may be signed out and need to log in again with the restored account.

Automated server backups

For scheduled, hands-off backups on your server, use the included deploy/backup.sh script with cron — see DEPLOY.md for the exact steps. It saves compressed database dumps on the server and automatically keeps only the most recent ones.

Two-Factor Authentication —
Recovery Codes —

Sign-in Credentials

Change Login Email

Update the email address you sign in with.

Change Password

Update the password used to sign in.

Account Protection

Two-Factor Authentication

Require a one-time code from an authenticator app when signing in.

Recovery Codes

One-time codes to reset your password if you get locked out.

Generating new codes replaces any existing ones. They're shown only once — store them somewhere safe.