tool · Updated
safebin.dev
End-to-end encrypted text sharing where the browser holds the key and the server only ever stores a ciphertext envelope.
Project overview
safebin.dev encrypts paste content in the browser with AES-256-GCM and keeps the key in the link fragment, which browsers do not send in HTTP requests. The API stores the ciphertext envelope, lifecycle metadata, and credential hashes. Pastes expire on a fixed schedule and support burn-after-read and creator revocation. The origin still serves the encryption code, so the protocol and threat model are published rather than implied.