Features
Syntax highlighting
20+ languages. TypeScript, Python, Rust, Go, SQL, Bash, and more. Server-side rendered with no JavaScript overhead.
Burn after read
Deleted on first open. Can't be viewed twice.
Password protection
Add a password so the URL alone is not enough to decrypt.
Markdown rendering
Full GitHub-flavored Markdown. Headers, tables, code blocks.
No account needed
No sign-up, no email, no ads. Paste and share in seconds.
Safety & security
Standard sharing
Simple links. Server-held keys.
Password protected
Zero-knowledge. Browser-only keys.
For sensitive content, use a password plus burn after read.
View security detailsHow it works
vs. the alternatives
Syntax highlighting
FAQ
What is textdrop.sh?+
textdrop.sh is a minimal, encrypted text sharing tool. Paste text, get a shareable link. It supports plain text, Markdown, and code with syntax highlighting — no account required.
Is my text private?+
Yes. All new pastes are AES-256-GCM encrypted in your browser. The decryption key lives only in the URL fragment (the part after #), which browsers never send to the server. textdrop.sh stores only ciphertext and cannot read new paste content. Password protection adds a second layer: the key is also wrapped with a password-derived key, so the URL alone is not enough to decrypt.
How does burn after read work?+
When you enable burn after read, the paste is permanently deleted the first time it is opened. Once viewed, it cannot be accessed again by anyone.
Do I need an account to use textdrop.sh?+
No. textdrop.sh requires no account, no email address, and no sign-up. Open the site, paste your text, and share the link.
How long do pastes last?+
You choose. Pastes can be set to expire after 1 hour, 1 day, 7 days, 14 days, or 30 days. After expiry, the paste is permanently deleted.
What is the maximum paste size?+
Pastes can be up to 5 MB of text.
How is textdrop.sh different from Pastebin?+
textdrop.sh is a Pastebin alternative focused on simplicity and privacy. Unlike Pastebin, it has no ads, requires no account, and every paste is end-to-end encrypted in your browser so the server cannot read your content. Pastes support burn-after-reading and expire automatically within 30 days. Password protection adds a second layer so the URL alone is not enough to decrypt.
Can I access a paste as raw text?+
Raw text access is available for standard pastes created with the legacy server-key model. Because all new pastes are zero-knowledge (the key lives in the URL fragment only), the /<id>/raw endpoint cannot decrypt them server-side and redirects to the paste view instead.