Paste and Share

About this tool

Paste and share on UtilityKit is a free, instant text-sharing tool that turns any snippet into a short link in seconds — no account, no install, no ads. Paste a config file, log output, code block, API response, meeting notes, or any block of text, choose how long the link should stay alive (from ten minutes to seven days), and optionally set a link load limit so the link stops working after a set number of opens. A downloadable QR code lets you hand off the link in person without typing. For sensitive content, add a password: your browser encrypts the text with AES-GCM before it ever leaves your device, so the server stores only ciphertext and can never read your data — the password itself is never transmitted. Paste and share is designed for quick, practical handoffs and ephemeral collaboration. Each paste can be up to 100 KB as stored; password-protected pastes are stored as Base64 ciphertext, so their practical limit is about 75 KB of plain text.

Why use it

• Instant Handoff: Share configs, logs, code, or meeting notes without email attachments, chat upload limits, or permanent chat history.

• Auto-Expiry: Automatic expiry eliminates long-lived accidental leaks — the paste disappears at your chosen time without any follow-up.

• Client-Side Encryption: AES-GCM encryption means the server stores only ciphertext; even a server breach cannot expose your content.

• Burn-After-Read: Link load limit lets you create links that stop working after a set number of successful loads, after which the paste is deleted.

• QR Code Sharing: QR codes make mobile sharing instant at presentations and meetups — no typing, no copy-paste.

• No Account Needed: No account, no email, no tracking — share privately without giving your data to a third-party paste service.

How to use

1. Type or paste your text into the input field — plain text, code, JSON, logs, or any snippet works.
2. Choose an expiry from the dropdown: 10 minutes, 1 hour, 1 day, or 7 days. The link stops working once this time passes, and the paste is deleted from storage.
3. Optionally set Link load limit to cap how many times the link can be loaded (Unlimited, or 1 to 100). Choose '1 — then delete' for burn-after-read behaviour.
4. Optionally enter a password to enable client-side AES-GCM encryption. Only people with the link and the password can read it.
5. Click Create link, then copy the shareable URL or click Download QR (PNG) to save a scannable image.
6. Recipients open the link in any browser. Password-protected pastes prompt for the password and decrypt entirely in their browser — nothing is sent back to the server.

When it helps

• When you need to pass a stack trace, config snippet, API key, or error log without creating a permanent record in Slack, Teams, or email.
• When you want a link that automatically stops working after an hour, a day, or a week with zero follow-up effort.
• When sharing sensitive content like credentials or tokens — password mode keeps plaintext entirely off the server.
• When you need a one-time link that stops working after the first person opens it (Link load limit = 1).
• When handing off a link in person at a meeting or event where a QR code is faster than typing.
• When you need a no-signup alternative to Pastebin or a screenshot for quick, ephemeral text sharing.

Examples

DATABASE_URL=postgres://user:pass@localhost/mydb
REDIS_HOST=127.0.0.1
APP_SECRET=s3cr3t

A shareable link valid for 1 hour with Link load limit 1 — the link stops working after the first recipient opens it.

TypeError: Cannot read properties of undefined (reading ‘map’)
    at processData (app.js:42:18)
    at Handler.run (index.js:18:5)

A 24-hour link sent to a teammate — no permanent Slack message, no screenshot, expires automatically.

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJ1c2VyXzEyMyJ9.abc (JWT or API token)

Encrypted paste — server stores only ciphertext. Share the URL via one channel and the password via another for two-factor handoff.

Tips

• Set Link load limit to 1 for burn-after-read: once the first recipient has loaded the paste, the link stops working.
• Combine a short expiry (10 minutes) with a Link load limit of 1 for maximum ephemerality — the paste stops loading at whichever limit hits first.
• Always use password mode for anything containing credentials, tokens, or personal data. The server stores only ciphertext and cannot help recover the content.
• The password is never in the shareable URL — you can safely post the link publicly and send the password via a separate channel for two-factor handoff.
• The QR image downloads as a standalone PNG — save it for presentations, meetup slides, or printed handouts where a typed URL is impractical.

Frequently Asked Questions

Glossary

TTL (Time To Live)

The duration a paste remains accessible before the server automatically deletes it. Options range from 10 minutes to 7 days.

AES-GCM

Advanced Encryption Standard in Galois/Counter Mode — a modern authenticated encryption algorithm used to encrypt password-protected pastes entirely in your browser before transmission.

PBKDF2

Password-Based Key Derivation Function 2 — an algorithm that derives a strong cryptographic key from a user-supplied password, making brute-force attacks significantly harder.

Ciphertext

The encrypted, unreadable form of your paste that the server stores when a password is used. Without the correct password, ciphertext cannot be decrypted.

Burn-after-read

A sharing pattern where content stops being available after a fixed number of views. Setting Link load limit to 1 enables burn-after-read on any paste.

Link load limit

An optional cap on successful link loads set at paste creation. Once reached, the link stops working for everyone and the paste is deleted from storage.