ZERO-KNOWLEDGE AES-256-GCM

Encrypted Pastebin

Share code, API keys, and secrets with true zero-knowledge encryption. Your data is encrypted in your browser before it reaches our servers — we can never read your pastes.

Why Regular Pastebins Are Dangerous

Traditional pastebins like Pastebin.com store your content in plaintext on their servers. Anyone with database access — including hackers, employees, and law enforcement — can read everything you've shared.

Impact

Over 12 million credentials were exposed via Pastebin in 2023 alone. Major breaches at Uber and Twitch involved secrets leaked through unencrypted paste services.

What Gets Leaked

API KeysDatabase PasswordsSSH KeysOAuth TokensEnvironment Variables.env FilesServer ConfigsPrivate Keys

How CloakBin's Encryption Works

1

Paste your content

Type or paste text, code, API keys, or secrets into the editor. Choose syntax highlighting from 50+ languages.

2

Encrypted in your browser

A random AES-256-GCM key is generated. Your content is encrypted entirely in your browser. The plaintext never touches our servers.

3

Share the link

You get a unique URL like cloakbin.com/abc#key. The encryption key lives in the URL fragment (#key) which browsers never send to servers.

4

Recipient decrypts locally

The recipient opens the link. Their browser fetches the ciphertext and decrypts it using the key from the URL — all client-side.

Why Choose CloakBin

CloakBin is the most feature-rich encrypted pastebin available. Built for developers who take security seriously.

Zero-Knowledge Encryption

AES-256-GCM encryption in your browser. The key stays in the URL fragment — our servers only see ciphertext.

Burn After Read

Self-destructing pastes that are permanently deleted after a single view. Perfect for one-time secrets.

50+ Languages

Full syntax highlighting powered by CodeMirror 6. JavaScript, Python, Rust, Go, SQL, and 45+ more.

No Account Required

Create encrypted pastes anonymously. No email, no tracking, no data collection. Sign up only if you want more features.

When to Use an Encrypted Pastebin

API Keys & Secrets

Share AWS keys, database passwords, or OAuth tokens without them being stored in plaintext.

Code Reviews

Share code snippets with syntax highlighting. Expiration ensures old code doesn't linger.

Environment Variables

Send .env files to teammates securely. Burn-after-read ensures the paste self-destructs.

Incident Response

Share error logs and credentials during incidents. Password-protect for team-only access.

Configuration Files

Share server configs, nginx rules, or Docker compose files without exposing infrastructure.

Personal Notes

Store private notes or drafts that only you can access with the link.

CloakBin vs Other Pastebins

FeatureCloakBinPastebinPrivateBinDefuse
Client-side encryption
Zero-knowledge (server can't read)
Burn after read
Password protection
Syntax highlighting (50+ languages)
Custom URLs
No signup required
API access

Frequently Asked Questions

How does CloakBin encrypt my pastes?
CloakBin uses AES-256-GCM encryption entirely in your browser. When you create a paste, a random encryption key is generated, your content is encrypted locally, and only the ciphertext is sent to our servers. The key is placed in the URL fragment (#key) which is never sent to the server.
Can CloakBin read my pastes?
No. CloakBin uses zero-knowledge architecture. The encryption key only exists in the URL fragment on your device. Our servers store only encrypted ciphertext that is mathematically impossible to decrypt without the key. Even if our database were breached, your data remains encrypted.
What is burn after read?
Burn after read is a self-destruct feature. When enabled, the paste is permanently deleted from our servers after being viewed once. The viewer sees the decrypted content, but the moment they close the page, the paste is gone forever. Perfect for sharing one-time secrets like passwords or API keys.
Is CloakBin better than Pastebin for sensitive data?
Yes. Regular Pastebin stores your content in plaintext on their servers — anyone with database access can read it. In 2023 alone, over 12 million credentials were found exposed on Pastebin. CloakBin encrypts everything before it leaves your browser, making data breaches meaningless.
Is CloakBin free?
Yes. Creating encrypted pastes, sharing them, and using burn-after-read are all free with no signup. Free accounts get 500KB paste size, 100+ days retention, and syntax highlighting. Premium users get 10MB pastes, permanent storage, custom URLs, and API access.

Start sharing securely

No signup required. Your first encrypted paste is 30 seconds away.

Create Encrypted Paste