PrivateBin-style privacy without running the server.
Browser-side encryption, burn-after-read, and expiry in a hosted developer workflow. No PHP server, storage backend, or certificate upkeep required.
Encrypted by default
AES-256-GCM in your browser. Password pastes are zero-knowledge.
No ads. No captchas.
Just paste and share. No accounts, no walls.
No paywalled features
Markdown, burn-after-read, syntax highlighting, expiry — all free.
PrivateBin and textdrop.sh password-protected pastes use a similar model: client-side AES-256-GCM with keys kept out of the request body. If you have the infrastructure to self-host and want full control, PrivateBin is excellent open-source software. If you want that security without managing a PHP server, web server, storage backend, and HTTPS certificates, textdrop.sh gives you a hosted developer-focused workflow with no setup.
Is PrivateBin truly zero-knowledge?+
Yes. PrivateBin encrypts data in your browser before transmission using AES-256-GCM. The decryption key is stored in the URL fragment (#...), which browsers never send to the server. For paste contents, the server receives encrypted data; users still need to trust the instance not to serve malicious JavaScript. textdrop.sh uses a similar architecture for password-protected pastes.
Can I use PrivateBin without self-hosting?+
There is a project-linked public instance at privatebin.net, and community-run public instances exist. However, these are not managed SaaS offerings. You're relying on an instance operator to configure and maintain the server correctly. textdrop.sh is a hosted service with a similar AES-256-GCM model for password-protected pastes, with no setup required.
How does textdrop.sh compare to PrivateBin on security?+
Both use AES-256-GCM client-side encryption. textdrop.sh password-protected pastes use a similar zero-knowledge model. textdrop.sh adds atomic burn-after-read via Lua scripts (race-condition safe), sliding-window rate limiting, per-request CSP nonces, and modern security headers. PrivateBin is open source, which allows independent code auditing.
What's the difference between textdrop.sh and PrivateBin?+
PrivateBin is open-source software you deploy yourself on a PHP server. textdrop.sh is a ready-to-use hosted service. Both use AES-256-GCM client-side encryption. textdrop.sh is the better choice if you want that security without server management; PrivateBin is the better choice if you need full control over infrastructure or want an auditable open-source codebase.
