Try it
Interactive editor — paste, set options, create a link.
Built for how developers share
One job per surface: create fast, view cleanly, integrate via API.
Instant paste
Drop code or logs, hit create, share a clean URL. No account required for basic pastes.
Syntax highlighting
Monaco editor with language detection, search, wrap, and fullscreen — built for developers.
Expiration & burn
Auto-expire pastes or burn after reading. Max-view limits are enforced atomically.
Privacy controls
Public, unlisted, private, password-protected, and optional client-side encryption.
Security-minded
CSP, safe raw endpoints, secret detection, rate limits, and audited privileged actions.
API-first
REST API, API keys with scopes, CLI-ready endpoints — the web app is one client of many.
Security without slogans
We only claim what the implementation provides. Password protection, server-side access control, and optional client-side AES-256-GCM are distinct — and documented honestly.
Read the security pageDevelopers & API
Base path /api/v1/ — create, fetch, raw, manage with scoped API keys.
curl -X POST "$API/api/v1/pastes" \
-H "Authorization: Bearer vp_live_..." \
-H "Content-Type: application/json" \
-d '{"content":"hello","visibility":"unlisted","expiration":"1d"}'Use cases
- Share a stack trace with a teammate without dumping it in Slack forever.
- Publish a config snippet with expiration for a one-off debug session.
- Pipe CI logs to a paste URL from a script using the API.
- Encrypt a sensitive note client-side before it ever hits the server.
FAQ
- Do I need an account?
- No. Anonymous paste creation is a core feature. Accounts unlock history, private pastes, collections, versions, and API keys.
- Is client-side encryption zero-knowledge?
- When enabled, the server stores ciphertext only and never receives the fragment key. You still trust the JavaScript we serve — see /security for the full threat model.
- What's the difference between unlisted and private?
- Unlisted is reachable via the secret URL but not meant for discovery. Private requires an authorized account.
- Can I use VoidPaste from CI or scripts?
- Yes. Use the REST API and /raw/:id with API keys. The API does not depend on browser behavior.
- Is VoidPaste free?
- Yes. There are no paid plans. A signed-in account can use private pastes, collections, versions, and API keys. Each paste is limited to 1 MB (1,048,576 bytes). Rate limits still apply.
- How do email verification and password reset work?
- We send transactional mail for account verification and password reset. Check your inbox (and spam) for links from [email protected]. Pastes themselves are never emailed.