Skip to main content
nullpaste

Private note

Write a private note only the right person can read

Your note is encrypted before it leaves your browser. Share the link, add a password for a second lock, and let it delete itself after one read. No account needed.
Size: 0 B / 1 MB
Privacy options
  • Encrypt in browser: content is encrypted with AES-256-GCM before upload. The key is added to the share link after “#” and never sent to the server — lose the full link and the paste can't be decrypted.
  • Burn after read: the paste is deleted after the first confirmed view — readers are asked to confirm before it opens.

Ctrl+Enter to create · delete code shown once

Encrypt in browser and burn after read are already on. Tick Password to add a second lock.

How to send a private note

  1. 1

    Write the note

    Anything up to 1 MB of text. It never leaves your browser unencrypted.

  2. 2

    Choose how private

    Encryption and burn-after-read are on. Add a password if the link might pass through other hands.

  3. 3

    Share the link

    Copy the whole link, including the part after # — that's the decryption key. Send any password separately.

  4. 4

    They read it, it's gone

    With burn-after-read on, the note is deleted the moment it's opened. Unread notes expire on their own.

Three locks you can combine

  • Encryption — the note is encrypted in your browser with AES-256-GCM. The key only exists in the link, so the server stores text it can't read.
  • Password — the reader also needs a password you share separately. Someone who intercepts just the link gets nowhere.
  • Burn after read or expiry — the note is deleted after one read, or after 10 minutes to 1 week, so it doesn't outlive its purpose.

Private isn't the same as unlisted

Many paste sites call a link “private” when it's merely unlisted: hard to guess, but stored as plain text the site can read and anyone with the link can open forever. A private note here is encrypted, can be password-locked, and doesn't stick around once it has been read.

Frequently asked questions

What is a private note?

A private note is text you share through a link that only the right person can read. Here that means it's encrypted in your browser before upload, can be locked with a password, and can delete itself after one read or after a set time.

Can I password-protect a note?

Yes. Tick Password before creating it. The reader then needs both the link and the password, so send the password some other way — by phone, SMS or in person. Passwords are checked with Argon2id; combine them with encryption so the server can't read the note either.

Can a private note be read more than once?

Only if you turn burn-after-read off. Then anyone with the link (and password, if set) can read it until it expires. With burn-after-read on — the default here — the first read deletes it.

Can I keep a private note for myself?

Yes: turn burn-after-read off, choose 1 week, and open the link on any device. It's a quick way to move a private note between your phone and computer without an account. For notes you need to keep long-term, use a proper encrypted notes app instead.

Who can read my note?

Whoever has the full link — and the password, if you set one. NullPaste stores only ciphertext when encryption is on, search engines are told not to index notes, and link previews in chat apps can't open a burn-after-read note.

Is it anonymous and free?

Yes. There are no accounts, no names or emails attached to notes, raw IP addresses are never stored, and every feature is free.