diff --git a/index.html b/index.html new file mode 100644 index 0000000..6c79e54 --- /dev/null +++ b/index.html @@ -0,0 +1,233 @@ + + + + + + Secure Pastebin - End-to-End Encrypted Message Sharing + + + + + + + + +
+
+ +

Secure Pastebin

+

End-to-End Encrypted • Password Protected • Self-Destructing

+
+ 🔒 AES-256-GCM + 🔑 Password + 🛡️ Zero-Knowledge + ⚡ Web Crypto API +
+
+ + + +
+
+ ⚠️ +
+ Important: The encryption key is stored only in the URL fragment (after #). + If you lose the URL, the data is permanently lost. We cannot recover it. +
+
+ + + +
+ +
+ + + + This password will be required to decrypt the message. Share it separately. + +
+
+ +
+
+ + +
+ +
+ + +
+
+ + + +
+
+ ✅ + Successfully encrypted! +
+ +
+ + +
+
+ ⏰ Expires: • 🔑 Key never leaves your browser +
+
+
+ +
+
+ 🔐 +
This message is password protected.
+
+

Enter Password to Decrypt

+ + + +
+ +
+ + +

🔓 Decrypted Content

+
+ + +
+ +
+

🔍 How It Works

+
+
+
1
+
+

Client-Side Encryption

+

Your message is encrypted in your browser using AES-256-GCM before being sent to the server. The encryption key is generated locally and never transmitted.

+
+
+
+
2
+
+

Zero-Knowledge Storage

+

The server only stores the encrypted ciphertext. It cannot read, decrypt, or access your original message. We have zero knowledge of your content.

+
+
+
+
3
+
+

Key in URL Fragment

+

The decryption key is embedded in the URL fragment (after #) which never reaches the server. Only the recipient with the full URL can decrypt.

+
+
+
+
4
+
+

Password Protection (Optional)

+

You can add an extra password layer. The password is used to derive the encryption key via PBKDF2 with 100,000 iterations. Share it separately.

+
+
+
+
5
+
+

Self-Destruction

+

Choose "Burn after reading" to automatically delete the message after first view, or set an expiration time (1 hour to 30 days).

+
+
+
+ +
+

🛡️ Technical Specifications

+
+
AES-256-GCM Encryption
+
PBKDF2 Key Derivation (100k iterations)
+
Random 12-byte IV per message
+
256-bit Encryption Keys
+
No Server-Side Logs
+
MySQL Database Storage
+
Web Crypto API (Native)
+
No Registration Required
+
+
+
+ + +
+ + + +