Paste and Share

About this tool

Paste and share on UtilityKit is a free, instant text-sharing tool that turns any snippet into a short link in seconds — no account, no install, no ads. Paste a config file, log output, code block, API response, meeting notes, or any block of text, choose how long the link should stay alive (from ten minutes to seven days), and optionally cap how many times it can be opened before it permanently self-destructs. A downloadable QR code lets you hand off the link in person without typing. For sensitive content, add a password: your browser encrypts the text with AES-GCM before it ever leaves your device, so the server stores only ciphertext and can never read your data — the password itself is never transmitted. Paste and share is designed for quick, practical handoffs and ephemeral collaboration. A 100 KB body limit keeps the service fast and fair for everyone.

Why use it

• Instant Handoff: Share configs, logs, code, or meeting notes without email attachments, chat upload limits, or permanent chat history.

• Auto-Expiry: Automatic expiry eliminates long-lived accidental leaks — the paste disappears at your chosen time without any follow-up.

• Client-Side Encryption: AES-GCM encryption means the server stores only ciphertext; even a server breach cannot expose your content.

• Burn-After-Read: Max opens lets you create true burn-after-read links that permanently self-destruct after a set number of successful views.

• QR Code Sharing: QR codes make mobile sharing instant at presentations and meetups — no typing, no copy-paste.

• No Account Needed: No account, no email, no tracking — share privately without giving your data to a third-party paste service.

How to use

1. Type or paste your text into the input field — plain text, code, JSON, logs, or any snippet works.
2. Choose an expiry from the dropdown: 10 minutes, 1 hour, 1 day, or 7 days. The paste is permanently deleted once this time passes.
3. Optionally set Max opens to limit how many times the link can be loaded. Set it to 1 for true burn-after-read behaviour.
4. Optionally enter a password to enable client-side AES-GCM encryption. Only people with the link and the password can read it.
5. Click Create link, then copy the shareable URL or click Download QR to get a scannable PNG you can share anywhere.
6. Recipients open the link in any browser. Password-protected pastes prompt for the password and decrypt entirely in their browser — nothing is sent back to the server.

When it helps

• When you need to pass a stack trace, config snippet, API key, or error log without creating a permanent record in Slack, Teams, or email.
• When you want a link that automatically stops working after an hour, a day, or a week with zero follow-up effort.
• When sharing sensitive content like credentials or tokens — password mode keeps plaintext entirely off the server.
• When you need a one-time link that self-destructs after the first person opens it (Max opens = 1).
• When handing off a link in person at a meeting or event where a QR code is faster than typing.
• When you need a no-signup alternative to Pastebin or a screenshot for quick, ephemeral text sharing.

Examples

DATABASE_URL=postgres://user:pass@localhost/mydb
REDIS_HOST=127.0.0.1
APP_SECRET=s3cr3t

A shareable link valid for 1 hour with Max opens 1 — the paste self-destructs after the first recipient opens it.

TypeError: Cannot read properties of undefined (reading ‘map’)
    at processData (app.js:42:18)
    at Handler.run (index.js:18:5)

A 24-hour link sent to a teammate — no permanent Slack message, no screenshot, expires automatically.

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyJ9.abc (JWT or API token)

Encrypted paste — server stores only ciphertext. Share the URL via one channel and the password via another for two-factor handoff.

Tips

• Set Max opens to 1 for true burn-after-read: the paste permanently self-destructs the moment the first recipient opens it.
• Combine a short expiry (10 minutes) with Max opens 1 for maximum ephemerality — the paste disappears at whichever limit hits first.
• Always use password mode for anything containing credentials, tokens, or personal data. The server stores only ciphertext and cannot help recover the content.
• The password is never in the shareable URL — you can safely post the link publicly and send the password via a separate channel for two-factor handoff.
• The QR image downloads as a standalone PNG — save it for presentations, meetup slides, or printed handouts where a typed URL is impractical.

Frequently Asked Questions

Glossary

TTL (Time To Live)

The duration a paste remains accessible before the server automatically deletes it. Options range from 10 minutes to 7 days.

AES-GCM

Advanced Encryption Standard in Galois/Counter Mode — a modern authenticated encryption algorithm used to encrypt password-protected pastes entirely in your browser before transmission.

PBKDF2

Password-Based Key Derivation Function 2 — an algorithm that derives a strong cryptographic key from a user-supplied password, making brute-force attacks significantly harder.

Ciphertext

The encrypted, unreadable form of your paste that the server stores when a password is used. Without the correct password, ciphertext cannot be decrypted.

Burn-after-read

A sharing pattern where content self-destructs after a fixed number of views. Setting Max opens to 1 enables burn-after-read on any paste.

Max opens

An optional view limit set at paste creation. Once reached, the server permanently deletes the paste and the link stops working for everyone.