A Pastebin alternative: client-side encrypted text sharing

Paste text or code and get a link — encrypted in your browser, with expiry, self-destruct and an optional password.

The limits of a classic pastebin

On a public pastebin, your content is often indexable, stored without encryption and accessible to anyone with the link — even to a search engine. For pasting an API key, a log containing personal data or a sensitive snippet, that's unsuitable.

Client-side encryption

Toolab's Secret Note encrypts your content with AES-256-GCM in the browser before anything is sent. The decryption key stays in the URL fragment (#) and is never transmitted to the server: technically, we cannot read your notes.

You choose the expiry, self-destruct after first read and, if needed, an extra password. Ideal to pass a one-off secret without leaving a trace.