PrivateBin alternative: OncePad vs PrivateBin
Both encrypt in the browser. PrivateBin is a configurable pastebin; OncePad is a fixed one-time handoff.
Short answer: OncePad is a free, no-account service for sharing a password, secret, or file through an end-to-end encrypted link. The link contains no decryption key, works once, and expires after 24 hours. Files may be up to 25 MB.
Where they agree
PrivateBin and OncePad both encrypt with AES-256-GCM in the browser so the server stores data it cannot decrypt. Neither standard workflow requires an account, both can protect a secret with an additional password or passphrase, and both can destroy encrypted data after it is read. PrivateBin is a mature open-source option for operators who want to run their own encrypted paste service.
The core difference: encrypted pastebin vs credential handoff
PrivateBin puts its encryption key in the URL fragment. Its documentation warns that anyone with an unprotected full URL can read the paste and recommends adding a strong password when that is not acceptable. OncePad's link contains no key at all: it always requires a generated 7-word passphrase sent separately. PrivateBin then offers paste-oriented features—Markdown, syntax highlighting, discussions, QR codes, configurable expiry, and optional file previews—while OncePad deliberately offers one reveal and one fixed expiry.
Side by side
| Feature | OncePad | PrivateBin |
|---|---|---|
| Encryption location | Browser, before upload (AES-256-GCM) | Browser, before upload (AES-256-GCM) |
| Key placement | Derived from a generated passphrase sent separately; no key in link | Encryption key in the URL fragment; optional password protection |
| File support / limit | One browser-encrypted file up to 25 MB | Optional and disabled by default; file types and size limit are instance-configured |
| Expiry | Exactly one reveal or 24 hours | Instance-configured expiration choices, including forever and burn after reading |
| Accounts | No account | No sender or recipient account in the standard paste workflow |
| Open-source status | Hosted app source not publicly released | Open-source public repository; designed for self-hosting |
When PrivateBin may suit you better
Choose PrivateBin when you need self-hosting, longer or custom expiration, formatted Markdown, syntax-highlighted code, an encrypted discussion, QR codes, or instance-specific file and storage configuration. It is a pastebin platform rather than only a credential handoff.
When OncePad is the better fit
Choose OncePad when you want a hosted, opinionated handoff where the sender cannot accidentally place the whole decryption credential in one link. Its generated passphrase, fixed one-read behavior, scanner-safe interstitial, and 24-hour ceiling require fewer security choices from the sender.
Last verified: August 18, 2026. Descriptions of PrivateBin are based on its primary documentation and are given in good faith; editions, limits, and policies change, so verify them before deciding. PrivateBin is a trademark of its respective owner and is not affiliated with OncePad.