Show HN: Hidetext.sh – encrypted pastebin where the server never sees the key
Show HN (score: 5)Description
How it works: your browser generates a random key and encrypts everything locally (NaCl secretbox, XSalsa20-Poly1305). Only ciphertext is uploaded. The key goes into the URL fragment — the part after # — which browsers never send to servers. The link carries the key, my server stores the locked box, and the two only meet in a browser.
A design detail I'm fairly happy with: burn-after-read doesn't destroy the paste on the first HTTP request. The naive version means a Slack or iMessage link preview "reads" your paste before the recipient ever opens it. Instead, the reader's tab sends a heartbeat, and the paste is deleted only once nobody is watching it anymore.
Being upfront about the limits (full page at hidetext.sh/how-it-works): you're trusting the JavaScript I serve — inherent to any browser-based E2E tool; filenames are stored in plaintext (contents aren't); and anyone holding the link can read the content, because the link is the key. No accounts, no cookies, no analytics, IPs aren't stored.
Stack: Next.js static on Cloudflare Pages, Pages Functions, D1 for metadata, R2 for encrypted blobs.
It's free. I'd love feedback — especially on the threat model and anything you'd expect from a tool like this that's missing.
More from Show
Show HN: Vektorgeist- A platform for AI operators and their agent's
Show HN: Vektorgeist- A platform for AI operators and their agent's VektorGeist is a platform designed for AI operators to discover, share, and distribute AI resources in one place. The platform brings together: AI tools MCP servers Prompts Workflows Templates Agents Technical articles A community for collaboration Recent updates include selectable layouts, customizable themes, an immersive interface, community profiles, and a marketplace for sharing projects and resources. The goal is to create a central hub where AI operators can find practical resources, contribute their own work, and collaborate with others without having to search across dozens of different platforms. Feedback is welcome, especially on: Overall user experience Features that would improve the platform Missing functionality Ideas for making it more useful for AI operators Website: <a href="https://vektorgeist.com" rel="nofollow">https://vektorgeist.com</a> Discord:<a href="https://discord.gg/EEsMTJ73m" rel="nofollow">https://discord.gg/EEsMTJ73m</a>
No other tools from this source yet.