PrivateBin

PrivateBin is an open-source, self-hosted web application for storing and sharing text documents, configuration files, and code samples. It operates as a minimalist pastebin where data is encrypted and decrypted directly in the browser using 256bit AES in Galois Counter mode. This specific architecture ensures that the server has zero knowledge of the stored content, as the plaintext never leaves the client side.

Users deploy the software on a server to create a private environment for sharing sensitive information. Because the server administrator cannot read the encrypted pastes, the system provides plausible deniability regarding the content hosted on the instance. For security, the application requires deployment over HTTPS and HSTS to prevent the injection of malicious code by third parties or internet service providers.

Key features

• Browser side encryption using 256bit AES in Galois Counter mode
• Password protection for individual pastes to prevent unauthorized access
• Expiration settings including burn after reading and forever options
• Markdown support with a built in preview function for formatted text
• Syntax highlighting for source code via prettify.js with four themes
• File upload support for images, media, and PDF files with previews
• Anonymous discussions with nicknames and IP based identicons
• QR code generation for easy transfer of URLs to mobile devices
• Multiple CSS templates including bootstrap5 and darkstrap

The software is written in PHP and includes a translation system with automatic browser language detection. It is designed for users and administrators who require a secure way to share data without trusting the server host with the plaintext content. The decryption key is stored in the URL fragment, meaning the server never sees the key used to unlock the data. This makes it suitable for technical teams and privacy advocates who need a controlled environment for temporary data storage.

PrivateBin serves as a privacy focused tool for secure document sharing and encrypted communication.