20+ languages. TypeScript, Python, Rust, Go, SQL, Bash, and more. Server-side rendered with no JavaScript overhead.
Deleted on first open. Can't be viewed twice.
Add a password for end-to-end encryption with no raw key stored.
Full GitHub-flavored Markdown. Headers, tables, code blocks.
No sign-up, no email, no ads. Paste and share in seconds.
Simple links. Server-held keys.
Zero-knowledge. Browser-only keys.
For sensitive content, use a password plus burn after read.
View security details| textdrop.sh | Pastebin | Gist | |
|---|---|---|---|
| Burn after read | ✓ | — | — |
| No account required | ✓ | ✓ | — |
| Password protection | ✓ | ✓ | — |
| Syntax highlighting | ✓ | ✓ | ✓ |
| Markdown rendering | ✓ | — | ✓ |
| Raw/API endpoint | ✓ | ✓ | ✓ |
| No ads | ✓ | — | ✓ |
textdrop.sh is a minimal, encrypted text sharing tool. Paste text, get a shareable link. It supports plain text, Markdown, and code with syntax highlighting — no account required.
Pastes are encrypted in your browser before being stored. Non-password pastes store the data key server-side for simple sharing and raw text access. Password-protected pastes use a client-side password-wrapped key, so the raw key and password are not sent to the server.
When you enable burn after read, the paste is permanently deleted the first time it is opened. Once viewed, it cannot be accessed again by anyone.
No. textdrop.sh requires no account, no email address, and no sign-up. Open the site, paste your text, and share the link.
You choose. Pastes can be set to expire after 1 hour, 1 day, 7 days, 14 days, or 30 days. After expiry, the paste is permanently deleted.
Pastes can be up to 5 MB of text.
textdrop.sh is a Pastebin alternative focused on simplicity and privacy. Unlike Pastebin, it has no ads, requires no account, supports burn-after-reading so content can be shared once and permanently deleted, and pastes expire automatically within 30 days. Password protection keeps content readable only by people who have the password.
Yes. Every paste has a /<id>/raw endpoint that returns the decrypted content as plain UTF-8 with no HTML wrapper. Useful for scripts and API integrations. Not available for password-protected or burn-after-read pastes.