PrivateBin is a free open-source encrypted pastebin: a website for sharing a piece of text that is encrypted in your browser.1 A pastebin turns pasted text into a shareable link. It suits people sending a private note or a support log who want to keep the contents out of an ordinary message.
Last checked October 28, 2026.
At a glance
- What it is: A browser-based encrypted text-sharing tool.2
- Works on: A current web browser with Web Crypto (built-in encryption) and WebAssembly, another feature the page needs.5
- Price: Free software to use and self-host.3 Budget separately for hosting if needed.
- Licence: Zlib/libpng for the core; bundled components have additional licences.3
- Best for: A private note you send on purpose to someone you trust.
- Official site: privatebin.info
What PrivateBin does and how it protects your privacy
PrivateBin encrypts and decrypts text in the browser using 256-bit AES encryption in Galois Counter Mode.2 Encryption scrambles a message so that reading it requires the right key. Think of it as handing over a locked envelope rather than a postcard.
The key travels in the part of the link after the # symbol, rather than being stored or transmitted to the paste server.5 Keep the complete link private, just as you would the note itself. For example, send a troubleshooting log directly to the person helping you, rather than posting its link in a public forum.
You can choose a trusted operator or run PrivateBin yourself.5 Self-hosting means running the website on a server you manage. Choose that route if you are comfortable taking responsibility for updates and availability.
PrivateBin key features
- Password protection: require an extra secret before the recipient can read the paste.2
- Expiration: choose a lifetime for the shared text where the host enables it.2
- Burn after reading: choose deletion after the first visit for a one-time handoff.5
- Formatting: Markdown offers simple document formatting and a preview.2
- Code highlighting: coloured code makes technical snippets easier to follow.2
- Attachments: share files when enabled; the host controls the size limit.8
- QR sharing: transfer a paste link to a phone by scanning a code.2
PrivateBin pros and cons
Pros
- Text is stored encrypted on the server.2
- Optional passwords add protection beyond possession of the link.8
- Expiration can limit how long a paste stays available, and one of the choices is forever.2
- The core licence allows changes and redistribution, subject to its conditions.3
Cons
- The project says you have to trust the server administrator not to inject malicious code.2
- Anyone with a complete, unprotected link can read its contents.2
- File uploads are disabled by default.8
- Older browsers, or a browser with Web Crypto or WebAssembly turned off, can stop it working.5
Is PrivateBin safe and private?
PrivateBin is maintained through its open-source project, which grew from ZeroBin.2 The latest release is 2.1.0, dated October 18, 2026.4 Ask a public host which version it runs before sharing sensitive material.
The project says a PrivateBin installation has to be used over HTTPS. It also warns that the server could be abused, or an administrator could be legally forced, into sending code that logs the decryption key.2 HTTPS protects the connection between your browser and the website. Use a host you trust, and treat encryption as one part of the decision.
The project says access logs might still show who accessed a paste, including who opened it first, even though the text stays encrypted.2 For tracking and telemetry, read the chosen host’s privacy policy and ask about analytics and log retention. Do not assume every website running the same software has the same practices. Optional language and template selectors can use session cookies.8 A cookie is a small value a website saves in your browser.
The project published a 2016 response to a 2014 security audit of its predecessor, ZeroBin.6 Treat that as historical background rather than certification of today’s version. For sensitive workplace information, follow your organisation’s approved sharing policy.
How to get started with PrivateBin
- Start at PrivateBin’s official website. For self-hosting, download the release archive from the project’s GitHub release page.4 For ordinary use, choose an HTTPS instance run by someone you trust.
- Try a harmless sample first. Paste a short note with no personal information, and choose plain text unless formatting is useful.
- Set the shortest practical expiration. Choose burn after reading only when you want a single handoff; do not open that link yourself before sending it.
- Add a strong, unique password for sensitive text. Share the password through a separate trusted channel rather than beside the link.
- Create the paste and copy its complete link. Keep the separate deletion link if you may need to remove it early.5
- Send it directly to the intended recipient. The project generally does not recommend a link shortener, because the full link, including the key, can be retrieved from the shortener’s access logs.5 Ask the recipient to confirm receipt.
Who should use PrivateBin, and who might prefer something else?
PrivateBin is a good fit for occasional private text handoffs, especially when you can choose a trusted host. Before sharing a log, remove unrelated names, addresses and account details. For repeated password sharing, consider Passbolt Community Edition instead.
For a continuing shared-writing project, consider HedgeDoc. For moving a file between devices, explore Magic Wormhole. Choose according to the job: a one-time note, an ongoing document or a file transfer.
Frequently asked questions about PrivateBin
Is PrivateBin free?
Yes. The core licence lets anyone use the software for any purpose, including commercial applications, and alter and redistribute it, subject to its conditions. Other bundled libraries have their own licences.3 If you operate a server, allow for its costs and upkeep; when choosing someone else’s host, check its terms.
Does PrivateBin work on iPhone or Android?
Start with the browser on your phone and try a harmless note before relying on it. Share Paste O2 is also listed on F-Droid as an Android PrivateBin client requiring Android 8.0 or newer.7 It is a separate client, so assess its updates separately from the server.
Can the server owner read my PrivateBin paste?
In the normal design, the paste is only stored encrypted on the server. The project warns that abuse, or a legal order, could still make it send code that logs the decryption key.2 Choose the host with the sensitivity of the message in mind.
Does burn after reading stop someone keeping a copy?
No. Treat it as a way to limit later retrieval, rather than a promise about the recipient. Once someone can read a note, assume they can copy or photograph it. Share only what that person needs.
