Skip to main content

Fully Managed PrivateBin
as a Service

Deploy PrivateBin as a fully managed service starting at €9/mo. Get automated backups, SSL, updates, support and monitoring included.

PrivateBin is an open-source zero-knowledge pastebin — encrypted text and file sharing where the server stores ciphertext only — combining the convenience of Pastebin.com with the privacy and control of self-hosted infrastructure you operate.

Free 7-day trial  99.9% Uptime SLA  No credit card  Cancel anytime

Free 7-day trial  99.9% Uptime SLA
No credit card  Cancel anytime

PrivateBin

PrivateBin

STARTING AT

€9/month
Automated Backups
Monitoring
Automated Updates
Auto SSL

USAGE

Unlimited
Human Support
Custom Domains
Terminal Access
File Manager Access
Deploy in your region 21 locations worldwide
GermanyFinlandNetherlandsUKSwedenUnited StatesCanadaSingaporeJapanAustraliaBrazilSouth Africa+9 more →
PrivateBin Preview Image

ABOUT THE SOFTWARE

What is PrivateBin

PrivateBin is an open-source zero-knowledge pastebin built around client-side AES-256 encryption. The server stores ciphertext only — it has no ability to read what users paste.

PrivateBin is licensed under the Zlib/Libpng license and community-maintained. It started in 2012 as a fork of Sébastien Sauvage's ZeroBin, grew under a new organisational home led by maintainer elrido, and today has over 6,500 GitHub stars and active contributors across the codebase.

The official Docker image (privatebin/nginx-fpm-alpine) has been pulled over 5 million times. The public instance directory at privatebin.net catalogs over 100 operator-run instances; the actual self-hosted footprint is larger but uncatalogued by design. PrivateBin is the canonical open-source zero-knowledge pastebin — the recommendation that appears in /r/selfhosted, /r/privacy, and Hacker News threads about Pastebin.com's recurring credential-dump controversies.

FEATURES

What PrivateBin does

PrivateBin runs end-to-end encrypted paste sharing with burn-after-reading, password protection, file attachments, and configurable expiration. Eight features that matter for day-to-day use — all client-side encrypted.

Client-side AES-256-GCM

Encryption and decryption happen in the browser. The server stores ciphertext only; the 256-bit key lives in the URL fragment and is never transmitted.

Configurable expiration

5 minutes, 10 minutes, 1 hour, 1 day, 1 week, 1 month, 1 year, or never. Default is configurable per instance; we ship 1-day default for sensitive workloads.

File attachments

Drag-and-drop file upload, encrypted client-side, with configurable size limits up to 100 MB. Image, video, and PDF previews render after decryption.

QR code generation

Generated client-side. Useful for moving a paste link from a desktop to a phone without exposing the URL fragment to a chat or messaging app.

Burn after reading

The paste self-destructs the first time it is successfully decrypted. Useful for one-time credential handoffs where a second decrypt would itself be an incident.

Password protection

Optional second layer on top of the URL key — useful when the URL might end up in a link-preview bot, chat archive, or screen-share recording.

Discussion mode

Optional threaded comments per paste, with the same client-side encryption. Anonymous or with nicknames and identicons. Disabled by default on our instances.

Multiple storage backends

Filesystem, PostgreSQL, MySQL, SQLite, S3, or Google Cloud Storage.

WHAT'S ALWAYS INCLUDED

Every app. Fully managed.
Nothing extra to pay for.

Every app you deploy includes the full managed service — security, backups, updates, and support from day one.

Automatic updates and patches

Apps run the latest stable version. Security patches applied silently, with rollback if needed.

Daily off-site backups

Multiple daily backups in redundant off-site locations. One-click restore if anything goes wrong.

24/7 uptime monitoring

Continuous monitoring with instant alerting. We respond before you notice.

SSL, firewall, DDoS protection

Auto-renewing SSL, hardened firewall rules, DDoS mitigation on every deployment.

Performance and scaling

We monitor resource usage continuously. When your app needs more headroom, we flag it and upgrade with your explicit approval.

Dedicated engineering support

Real engineers on chat. DNS, SMTP & migration help. All included in €9.

WHY MANAGED

Why teams pick managed PrivateBin

On 25 November 2025, security researchers exposed 80,000 user pastes containing credentials from banks, telecoms, and government agencies. PrivateBin solves the Pastebin.com problem at the architecture level — but running it well in production is a different problem from using it well.

The watchTowr Labs disclosure of 25 November 2025 was not a one-off. Five years of JSONFormatter data and one year of CodeBeautify data — more than 5 GB of pastes — sat publicly accessible with Active Directory credentials, database keys, cloud tokens, code-repo secrets, and payment-gateway API keys, posted by employees of government agencies, telecoms, financial institutions, and critical-infrastructure operators. Pastebin.com has been the staging ground for credential dumps for over a decade. The structural fix is not "ask people to stop pasting things" — it is a paste tool the server cannot read, on a domain you control.

Self-hosting PrivateBin is not just docker run privatebin/nginx-fpm-alpine. A production instance needs PHP-FPM tuned for memory limits, a storage backend that won't silently corrupt under concurrent writes, a purge cron that runs independently of paste creation, Content-Security-Policy and Sub-Resource Integrity headers that survive each upgrade, and template selection deliberately locked off after CVE-2025-64714.

The most expensive failure mode is the quiet one: an instance with templateSelection enabled — a default on older configs — was vulnerable to CVE-2025-64714, an unauthenticated local-file-inclusion in the template-switching feature that allowed arbitrary PHP file inclusion via a single misconfigured cookie. PrivateBin's maintainers audited the public directory on 12 November 2025 and found 11 operators still running affected configurations after the patch was published the same day. The fix is to pin templateSelection: false and stay current with the v2.0.x release stream. We ship that lock-down by default, on every instance.

REVIEWS

Hear from customers ​like you​​​​​​​

Successful businesses and professionals around the world rely on DANIAN every day

USE CASES

Three teams who run PrivateBin on DANIAN

These are representative team types we set up most often. Each starts with the same flat €9 plan.

MSSP, EIGHT ANALYSTS

Replacing Pastebin.com after the JSONFormatter dump

Eight-person managed security services firm in the UK. Region: UK. One PrivateBin instance per customer engagement, custom domain on the MSSP brand, burn-after-reading enforced as default. SOC analysts ship IOC bundles at 1-hour expiry; the URL fragment moves over Signal. A second decrypt is an investigation. ~120 customer instances, ~40 paste creations per analyst per week.

LAW FIRM, 45 PARTNERS

Email archive becomes discovery surface

Mid-sized litigation practice in Frankfurt. Region: Germany. One instance on a custom subdomain on the firm's brand. Burn-after-reading on by default, password layer required for any paste containing client identifiers, CSP locked down to block third-party asset loading. Partners share draft language by URL, opened once, gone after. ~110 pastes per month across 45 lawyers.

PLATFORM TEAM, 20 ENGINEERS

Killing the paste-in-Slack habit

Internal platform team at a B2B SaaS company. Region: Australia. Internal-only DNS so the instance is not reachable from the public internet, 10-minute expiry default on the new-paste form, file-upload enabled for short env-files. Engineers hand off temporary database connection strings and reproduction snippets during incidents. ~300 pastes per month, zero in Slack history.

COMPARISON

Four ways to run PrivateBin

Four real paths to running an encrypted paste tool in 2026: the centralised SaaS most credential dumps hit, a VPS you operate yourself, a home server, or fully managed by us. The math holds at every team size.

 PATH1 USER5 USERS 10 USERSWHAT'S INCLUDED YOUR TIME
Pastebin.com PRO
Proprietary SaaS
$35.88 / year
$2.99/mo per account
$179.40 / year
five PRO accounts
$358.80 / year
ten PRO accounts
Paste storage on their servers — plaintext, scanned, content moderated, US-hosted, vendor-controlled
0 hours / mo
Self-host on a VPS
DIY
$24 / mo infra
+ €60–240/mo time
Same infra, same timeSame infra, more abuse to triageWhat you build: $24 production-class VPS, $5 object-storage backup, $15 monitoring1–2 hours / mo, plus on-call
Home server
Synology DS923+ class
€650 hardware
+ €20/mo electricity + ISP static IP
SameSame, plus on-call to your living roomNAS device, business-grade static-IP line, off-site backup target you wire up yourself2–3 hours / mo, plus on-call
DANIAN Managed PrivateBin€9 / month€9 / month€9 / monthHosting, HTTPS, daily backup, monitoring, CVE patching, abuse desk routing, human support0 hours / mo

Pastebin.com PRO is purchased per-account; a team of five each wanting their own PRO account pays five times. VPS path adds operational time at €60–120/hour for patching, certificate renewal, backup verification, and on-call after CVE disclosures. Home server amortises a €650 NAS-class device over 36 months and adds electricity at €0.30/kWh, a business-grade static-IP line, and an off-site backup target.

BY INDUSTRY

PrivateBin for specific industries

PrivateBin fits where a buyer needs ephemeral encrypted text exchange, jurisdictional control over the host, and architectural protection against operator-side data leaks. Four segments where the fit is strongest.

NIST SP 800-61 Rev. 2 (Computer Security Incident Handling Guide) treats secure analyst-to-analyst sharing of indicators of compromise as a baseline incident-response capability. The JSONFormatter and CodeBeautify dumps of November 2025 made the case for the obvious move: stop sharing IOCs and credential samples on a centralised paste host.

On managed PrivateBin, we deploy one instance per MSSP customer with a custom domain on the MSSP's brand, the dedicated purge cron running every 5 minutes (so IOC bundles actually expire when scheduled), burn-after-reading enforced as default for one-time credential handoffs, and a regional pin to the customer's jurisdiction. A typical SOC workflow ships an IOC package at 1-hour expiry, communicates the URL fragment over Signal, and treats a second decrypt as an investigation. Expect 1 instance per customer engagement and 20 to 80 paste creations per analyst per week.
ABA Model Rule 1.6 (Confidentiality of Information) and equivalent professional-secrecy obligations in EU bar associations require lawyers to take reasonable steps to prevent inadvertent disclosure of client information. Email archives have become discovery surface in litigation; partners increasingly avoid sending draft language by email at all.

On managed PrivateBin, we run one instance per firm with a custom domain on the firm's brand, burn-after-reading enforced by default, CSP locked down to prevent third-party asset leaks, and the password layer required for any paste containing client identifiers. Drafts are shared by URL, opened once, gone after. The instance is not in the email archive and not in the matter management system — by design. Expect 1 instance per firm and 50 to 200 pastes per month across the partner roster.
NIST SP 800-57 Part 1 Rev. 5 (Key Management) sets the operational baseline for short-lived credentials: minimise persistence, scope by purpose, rotate aggressively. The default workflow — paste the credential in Slack, ask the recipient to delete the message — fails on every axis: Slack retains the message in audit logs, the recipient often does not delete, the credential persists.

On managed PrivateBin, we wire the instance for one-time handoffs — burn-after-reading default, 10-minute expiry default on the new-paste form, file-upload enabled for short env-files, and an internal-only DNS record so the instance is not reachable from the public internet. Platform teams use it to hand off temporary cloud-console URLs, ad-hoc database connection strings, and reproduction snippets during incidents. Expect 1 instance per team of 10 to 50 engineers and 100 to 400 pastes per month.
The Reporters Committee for Freedom of the Press source-protection guidance is the canonical operational standard for newsrooms — minimise metadata, avoid centralised intermediaries, route source contact through tooling the news org controls. PrivateBin is explicitly not a SecureDrop replacement; it has no anonymity layer of its own and no source-vetting workflow. For the narrow task of receiving short text submissions from sources who already understand URL fragments and out-of-band passwords, it is usable.

On managed PrivateBin, we pin the region to the publication's jurisdiction, lock CSP down to prevent third-party tracking, set 24-hour expiry as default, and document the workflow for source contact over Signal first, paste URL second. The instance carries the publication's brand on a custom domain. Expect 1 instance per masthead and irregular paste volume tied to story cycles.

FAQ

Frequently asked questions

Everything teams ask before signing up — answered straight, without sales speak.

Three groups: technical setup, migration, and how DANIAN works as a service.

01

Technical and configuration

Two layers. We run the latest stable PrivateBin, which includes the patched stream that fixed the vulnerability in 2.0.3 on 12 November 2025. And we enforce templateSelection: false regardless of upstream defaults, so the exploit vector (template-switching enabled with an attacker-controlled cookie) cannot reach the vulnerable code path. Both layers must fail for the CVE to land. We pin the second layer because configuration drift is the failure mode we have actually seen.
Default is 10 MB per paste including any attachments, configurable up to roughly 100 MB. Encryption time scales linearly with content size — a 50 MB upload encrypts in 2 to 3 seconds on a recent laptop, 8 to 10 seconds on a phone. Above 100 MB the constraint is browser memory during client-side encryption, not the server. For larger transfers, a dedicated file-share app is the better fit.
Yes — aggressive content blockers, script managers, and some privacy extensions can break the WebAssembly compression or the WebCrypto calls PrivateBin uses. If a paste fails to encrypt or decrypt, an incognito window with extensions disabled is the diagnosis. PrivateBin requires browsers no older than Firefox 54, Chrome 57, or Safari 11.
We take daily off-site snapshots of the encrypted paste store and the configuration. Because the data is client-side encrypted, the backups are also unreadable to us — restore is byte-exact but only useful with the URL fragments your users hold. Most teams ask for shorter retention than the platform default because stale paste data accumulates no value over time.
PrivateBin latest stable. We track each upstream release on staging, then roll it to customer instances usually within a few days of the upstream tag. Critical security patches — like CVE-2025-64714 — we apply within hours of upstream disclosure. Major schema changes trigger a notification and a backup verification before we proceed.

02

Migration and onboarding

We can activate your app on your own custom domain/subdomain. Examples: mydomain.com, anyword.mydomain.com.
Or, on our randomized free subdomain. Example: 963.apps.danian.cloud
If you wish to use a custom domain/subdomain, select that option when ordering your app (or notify us later). We will send you the required DNS records and if needed, our tech team will modify them for you.
21 datacenter locations across six continents. You choose the region at provisioning. Application data sits in the region you choose; pick whichever is closest to your users or matches your data-residency preference.
Yes. Request a region migration from the dashboard and we run the move in the background. The system emails you when the migration completes; total transfer time depends on data volume but typical instances finish in a few hours. There is no extra charge for a region change.
Yes. Full data export is available at any time, in a portable format you can bring to any infrastructure.
Not in any meaningful sense. Pastebin.com content is plaintext on their servers and there is no clean export. The right move is to start fresh on PrivateBin and use it as the place new pastes go from now on. The zero-knowledge architecture means there is nothing to import in the traditional sense — and that property is exactly what makes the platform defensible.
The clean pattern is one PrivateBin instance per client at €9 each — independent custom domains, separate backups, separate billing lines, clean isolation. Many agencies run a master instance for internal use plus one per client engagement. Provisioning multiple instances from the same account dashboard is a few clicks each.

03

Billing, support, and platform

€9 covers everything we do for that app: hardware in the region you choose, daily off-site backups with one-click restore, automatic security patches and version upgrades, 24/7 monitoring, SSL and firewall, and engineering support on Email/LiveChat. There are no setup fees or hidden line items. For more info see our Pricing page.
If you decide to continue, we charge €9/app/month from day 8. If you don't, the trial ends and you can export your data. No card is required for the trial, and we never auto-charge you without explicit consent.
No. The €9/month is flat regardless of how many users log into your app. Add 5 users or 50; the price doesn't change.
24/7 Live chat and email support, both staffed by engineers who run the systems. We handle DNS configuration, SMTP setup, app integrations, performance tuning, troubleshooting, and migration help. Response time is typically under an hour. There is no tier system — every customer gets the same support.
Yes. Cancel from the dashboard. We don't charge a cancellation fee, we don't lock data, and we will export your data to you on request before deletion. data to you on request before deletion.
Every customer instance is backed up daily to a separate region from the primary. We test restores. You can request a restore at any backup point within the retention window — usually 7 days for daily backups.
Your application data sits in the region you choose at provisioning — 21 datacenter locations across six continents. Account-level data (billing, account email, support ticket history) is processed centrally. Application data region is picked by you, per app.
99.9% uptime SLA on every app, every tenant. Service credits are documented at danian.co/service-level-agreement. The status page is located at status.danian.co.
When your tenant approaches the resource ceiling — the base tier holds 1 vCPU/RAM, 30 GB storage — we notify you. Resource upgrades happen with your explicit consent; we will not upgrade your tenant or charge you without it.
We wait. We don't suspend the app or delete your data on the first failed charge. We email you, you fix the card on file, and we continue.
Invoices can be downloaded from the billing dashboard in PDF the day each charge succeeds. EU VAT is added where applicable and the VAT-reverse-charge regime applies for VAT-registered businesses with a valid number.
150+ open-source apps across automation, team chat, file sync, analytics, AI, password management, email marketing, dev tools, project management, smart home, CMS, and federated social. See the full catalog →
Yes. Every instance comes with a web-based terminal and a file manager in your DANIAN management dashboard. Useful for managing your data and customizations.
Resources scale with your usage. If your app needs more vCPU, RAM, or storage, we add it — and we ask first before any change to your plan. €9 is the floor; resource-heavy workloads may price higher, but you'll always know in advance.
Yes. We have both a Partner program and an Affiliate program available. Anybody can sign up.
No contract. No minimum commitment. Cancel anytime from the dashboard with one click. The 7-day free trial requires no credit card. After the trial converts to paid, you can still cancel at any month without notice or penalty.

DEPLOY IN YOUR REGION

21 datacenter locations on six continents

Pick the region closest to your users.

United States, Germany, Finland, Singapore, Australia, Brazil, Canada, Netherlands, UK, Spain, Italy, France, Sweden, Malaysia, India, Japan, Mexico, Poland, South Korea, Chile, South Africa and more coming soon

Global Reach Map

Try managed PrivateBin for 7 days

No card. Cancel from the dashboard.