Repolode
Submit
nxfu

nxfu/binthere

Self-destructing, end-to-end encrypted pastebin: notes are encrypted in the browser with AES-256-GCM and vanish after one read or 24 hours.

Open-source alternative to:YopassPrivateBin

View on GitHubWebsite
Stars
263
Forks
41
Open issues
1
Last commit
last month

What is it?

binthere is a zero-knowledge pastebin for sharing short secrets such as credentials, private messages, or code snippets. The browser generates a random 256-bit key and encrypts the note with AES-256-GCM before any network request is made. Only ciphertext is uploaded, and the key is appended to the share link after the # fragment, which browsers never send to the server.

Each note is one-time view: the first reader atomically consumes it, and later visitors receive a 410 Gone response. Unread notes are deleted automatically after 24 hours. An optional password is mixed into key derivation, so neither the link nor the password alone can decrypt the note. Losing the link means the note cannot be recovered, since there are no accounts or server-side index.

The project runs as a single Cloudflare Worker using Static Assets, Workers KV, and a Durable Object for burn-after-read. It ships with an official npm CLI that uses the same protocol, and it can be self-hosted within Cloudflare's free tier.

Key features

  • 01Client-side AES-256-GCM encryption; the server only stores ciphertext.
  • 02One-time view with atomic consumption, so only one reader gets the note.
  • 03Automatic deletion of unread notes after 24 hours.
  • 04Optional password layered on top of the link key.
  • 05Safe Markdown rendering with syntax highlighting, QR codes, and delete links.
  • 06Official CLI published to npm with an interactive menu and pipeline support.

Use cases

  • Sending a password or API token to a colleague without leaving it in chat history.
  • Sharing a one-off private message that should not persist on a server.
  • Passing a code snippet or config that should be read once and then disappear.
  • Scripting secret hand-offs from a terminal with the CLI.

Quick start

  1. 1

    Install dependencies

    npm install
  2. 2

    Start the local dev server at http://127.0.0.1:8787

    npm run dev

Things to know

  • The server still sees IP addresses, timing and ciphertext sizes, so it is private but not anonymous.
  • Decryption runs in JavaScript served by the host, so a compromised deployment could serve malicious code.
  • It is optimized for Cloudflare Workers, so self-hosting elsewhere is not the intended path.

Topics

#encryption#pastebin#zero-knowledge#cloudflare-workers#privacy#aes-256-gcm#self-hosted

FAQ

What is binthere?
Self-destructing, end-to-end encrypted pastebin: notes are encrypted in the browser with AES-256-GCM and vanish after one read or 24 hours. binthere is a zero-knowledge pastebin for sharing short secrets such as credentials, private messages, or code snippets. The browser generates a random 256-bit key and encrypts the note with AES-256-GCM before any network request is made. Only ciphertext is uploaded, and the key is appended to the share link after the # fragment, which browsers never send to the server.
Is binthere free to use? What license does it have?
binthere is open source under the MIT license. Check the license terms before using it in commercial products.
Is binthere still maintained?
Updated within 6 months. The last commit to binthere was on Sep 19, 2026.
What can I use binthere for?
Sending a password or API token to a colleague without leaving it in chat history. Sharing a one-off private message that should not persist on a server. Passing a code snippet or config that should be read once and then disappear. Scripting secret hand-offs from a terminal with the CLI.
How do I install binthere?
Install dependencies: npm install Start the local dev server at http://127.0.0.1:8787: npm run dev
Where can I get binthere?
The source code and installation instructions are on GitHub: https://github.com/nxfu/binthere

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects