# PasteOkay > PasteOkay is a private pastebin that turns text or code into one short link with a chosen expiry, optional password protection, optional AES-256-GCM encryption in the browser, and burn after reading. No account is required. PasteOkay is built for private handoffs rather than public publishing. There is no public paste directory, no advertising, no analytics and no third-party scripts. The service runs on Cloudflare Pages, Pages Functions and D1. ## Key facts - Free plan: 512 KB per paste, 30 pastes per hour, expiry from 10 minutes to 7 days. - PRO: one-time $5 payment, 2 MB per paste, 300 pastes per hour, expiry up to 30 days, 100 short links with labels and click limits. - Encryption at rest: AES-256-GCM with a per-paste salt and the paste identifier bound as additional authenticated data. - Optional browser encryption: the key is generated on the device and placed after the # in the link; browsers do not send the fragment to the server. - Password protection: PBKDF2-SHA256 with 150,000 iterations derived in the browser, compared in constant time on the server. - Burn after reading: the paste row is deleted on the first successful open. - Manage link: returned once when a paste is created, stored only as a SHA-256 hash, and usable to replace or delete the paste. - Expired pastes stop resolving on every read; physical cleanup happens in the background. - The operator can read a stored paste that was not encrypted in the browser. Browser-encrypted pastes remain unreadable to the server. - Contact: privacy@okay.ovh ## Comparisons - [PasteOkay vs Pastebin.com](https://okay.ovh/compare/pastebin-com): Pastebin.com is the best known paste service. We compare its expiry rules, ads, public archive and privacy model with PasteOkay's encrypted, account-free editor. - [PasteOkay vs PrivateBin](https://okay.ovh/compare/privatebin): PrivateBin is the best known open-source encrypted pastebin. We compare its self-hosting model, attachments, expiry and interface with PasteOkay. - [PasteOkay vs 0x0.st](https://okay.ovh/compare/0x0-st): 0x0.st is a minimalist file and text host with size-based retention. We compare its retention model, privacy limits and command-line workflow with PasteOkay. - [PasteOkay vs Hastebin](https://okay.ovh/compare/hastebin): Hastebin is a small open-source paste tool loved for its speed. We compare its limits, expiry behaviour and privacy with PasteOkay. - [PasteOkay vs dpaste](https://okay.ovh/compare/dpaste): dpaste is a dependable Django pastebin with simple expiry options. We compare its public listing, password support and encryption with PasteOkay. - [PasteOkay vs termbin](https://okay.ovh/compare/termbin): termbin turns a netcat command into a paste URL. We compare its terminal workflow, retention and total absence of privacy controls with PasteOkay. - [PasteOkay vs ix.io](https://okay.ovh/compare/ix-io): ix.io is a command-line paste service used by developers for quick logs. We compare its workflow, retention and privacy with PasteOkay's browser editor. - [PasteOkay vs ControlC](https://okay.ovh/compare/controlc): ControlC is a long-running public paste host with ads and a permanent archive. We compare its exposure model with PasteOkay's expiring private links. - [PasteOkay vs GitHub Gist](https://okay.ovh/compare/github-gist): GitHub Gist is where developers keep snippets. We compare its version history, public discovery and account requirement with PasteOkay's private, expiring pastes. - [PasteOkay vs Google Docs](https://okay.ovh/compare/google-docs): Google Docs is built for shared editing and permanent files. We compare its access model, expiry behaviour and privacy with PasteOkay. - [PasteOkay vs Notion](https://okay.ovh/compare/notion): Notion is a workspace for long-lived documents. We compare its sharing model, permanence and account requirement with PasteOkay's expiring, account-free pastes. - [PasteOkay vs Rentry](https://okay.ovh/compare/rentry): Rentry turns markdown into a page with an edit code. We compare its permanent publishing model, custom addresses and privacy with PasteOkay. - [PasteOkay vs Telegraph](https://okay.ovh/compare/telegra-ph): Telegraph publishes anonymous articles with a permanent URL. We compare its no-account publishing model, formatting and privacy with PasteOkay. - [PasteOkay vs CryptPad](https://okay.ovh/compare/cryptpad): CryptPad offers encrypted documents, pads and spreadsheets. We compare its collaboration features, storage model and complexity with PasteOkay's single-purpose editor. - [PasteOkay vs Etherpad](https://okay.ovh/compare/etherpad): Etherpad is a real-time collaborative editor used by teams and classrooms. We compare its persistence, privacy and hosting model with PasteOkay. - [PasteOkay vs Bitwarden Send](https://okay.ovh/compare/bitwarden-send): Bitwarden Send is an encrypted sharing feature inside a password manager. We compare its account requirement, text limits and workflow with PasteOkay. - [PasteOkay vs Yopass](https://okay.ovh/compare/yopass): Yopass is an open-source service for one-time secrets. We compare its one-read model, expiry, self-hosting and interface with PasteOkay. - [PasteOkay vs magic-wormhole](https://okay.ovh/compare/wormhole): magic-wormhole transfers files and text between terminals with end-to-end encryption. We compare its code phrase workflow with PasteOkay's browser paste. - [PasteOkay vs Firefox Send](https://okay.ovh/compare/firefox-send): Firefox Send shut down in 2020. We explain what replaced it, which alternatives keep the encrypted-link idea alive, and where PasteOkay fits for text. - [PasteOkay vs transfer.sh](https://okay.ovh/compare/transfer-sh): transfer.sh shares files from the command line with a simple curl command. We compare its retention, encryption and terminal workflow with PasteOkay. - [PasteOkay vs WeTransfer](https://okay.ovh/compare/wetransfer): WeTransfer is built for sending large files with a download link. We compare its expiry, encryption and account model with PasteOkay's text-first pastes. - [PasteOkay vs OneTimeSecret](https://okay.ovh/compare/onetimesecret): OneTimeSecret shares a secret through a link that self-destructs after reading. We compare its passphrase model, expiry and text handling with PasteOkay. - [PasteOkay vs Slack](https://okay.ovh/compare/slack): Slack keeps team conversations searchable for months. We compare its retention, access model and file handling with PasteOkay's private, expiring links. - [PasteOkay vs Discord](https://okay.ovh/compare/discord): Discord is built for communities, voice and persistent message history. We compare its privacy boundaries and retention with PasteOkay's expiring links. - [PasteOkay vs email](https://okay.ovh/compare/email): Email is universal and permanent. We compare its retention, forwarding behaviour and security with PasteOkay's expiring, password-protected links. ## Guides - [Share a password safely](https://okay.ovh/guides/share-a-password-safely): A step-by-step method for sending a password or credential so it expires, can be read once, and never sits in a mailbox or chat history. - [Share logs without leaking secrets](https://okay.ovh/guides/share-logs-without-leaking-secrets): A practical redaction and handoff checklist for logs, stack traces and configuration files that may contain credentials or personal data. - [Use burn after reading](https://okay.ovh/guides/use-burn-after-reading): How burn-after-reading links work, when a single read is the right model, and how to avoid locking out the person who needs the text. ## Trust and machine-readable files - [Security policy](https://okay.ovh/security) - [Chrome extension privacy policy](https://okay.ovh/privacy-extension) - [security.txt](https://okay.ovh/.well-known/security.txt) - [Sitemap](https://okay.ovh/sitemap.xml) - [Comparison Atom feed](https://okay.ovh/compare/feed.xml) - [Full content for language models](https://okay.ovh/llms-full.txt) ## Canonical entry points - [Create a paste](https://okay.ovh/#editor) - [All comparisons](https://okay.ovh/compare/) - [All guides](https://okay.ovh/guides/) - [About and editorial policy](https://okay.ovh/about)