FAQ

What is securebin?

securebin is a Google Chrome extension that allows you to securely interface with Pastebin. It encrypts plaintext for safe storage and sharing online.

How does it work?

securebin lets you encrypt text and store it on Pastebin. You get a link and a key for sharing, which the recipient uses for decryption.

What do I need to use securebin?

Nothing — securebin works out of the box. You can optionally add your own Pastebin API key in the settings to post pastes under your account.

Can I use securebin without encryption?

Sure — securebin works as a regular Pastebin client. Encryption is optional; just leave secure mode off.

What encryption does securebin use?

securebin uses the browser's native Web Crypto API and supports AES encryption in GCM (recommended) and CTR modes. Ciphertexts from older versions that used CBC can still be decrypted.

What are the supported key lengths?

Supported key lengths are 128, 192, 256 bits.

Is securebin secure if someone has access to my computer?

No, it doesn't protect against physical access to your computer. Data in the extension’s history or settings is stored unencrypted.

What information is public after encryption?

The cipher text, encryption mode, IV, tag (with GCM mode), salt, and key length (with password encryption) are public.

What remains private?

The encryption key is private.

How secure is JavaScript cryptography in browsers?

Opinions vary, but securebin encrypts data locally using the browser's built-in Web Crypto API, so plaintext never leaves your machine.

Where can I learn more about securebin and its development?

Check out our Wiki page to learn about our project, design decisions, and security details.

Learn more in the Wiki