- Upvotes
- 4
- Comments
- 2
- Impressions
- 14
this week
discussions
this week
About
DevPaste is a free encrypted pastebin for sharing sensitive text like passwords, API keys, tokens, and credentials. It uses end-to-end encryption performed in the browser with AES-256-GCM, so the plaintext never leaves the sender’s device. The server stores only ciphertext and cannot decrypt it because the decryption key is kept in the URL fragment (the part after #), which browsers do not send to servers. Users can create a link without an account, set an expiration time from 5 minutes to 30 days, and optionally enable burn-after-read so the message self-destructs after being opened once. An optional password lock adds a second layer of access control, intended to be shared via a separate channel.
Problem & solution
Problem
Sharing passwords/API keys via chat or email risks leaks and persistent access.
Solution
Encrypts text in-browser and shares expiring links with burn-after-read and lock.
Who it's for
Developers and teams sharing credentials or secrets
Main features
- AES-256-GCM encryption
- Zero-knowledge sharing
- URL fragment key
- Expiry & self-destruct
- Optional password lock
Use cases
- Send database password to teammate
- Share API keys temporarily
Comments
2 shownShare your thoughts about this tool.
Sign in to leave a comment.
- Holla DerMar 20, 2026
Tried DevPaste for sharing a DB password with our ops guy. Set it to burn after read, sent via Slack -he opened it once and poof, gone. No more screenshots or sketchy DMs
- dasozdazz3646Mar 20, 2026
Just sent a Stripe API key. burn-after-read worked perfectly. No trace left anywhere. Game changer for quick secure shares
