One notepad.
Every device you own.
Copy on your laptop, paste on your phone. Jot something here — it's already there. Paste is one private notepad that follows you everywhere, fully encrypted on your device before it ever syncs. No account. No cloud. Nothing to set up.
Don't trust us. Read the code.
Every byte of Paste — the encryption envelope, the sync engine, the relay client, the verifier — is open source. Read it, fork it, run your own verifier against it. Security you can't inspect isn't security.
Everything you copy, where you need it — and nothing where you don't.
Copy here, paste there
Copy on your laptop, paste on your phone seconds later. Text, links and code snippets follow you across your own devices.
Private notes
Keep snippets as plain, markdown, or code notes. Pin the ones you paste all the time. Bodies and titles are always encrypted.
Instant local search
Find any clip or note in under 30 ms across 10,000 entries — searched on your device, against a private local index.
Tap-to-decrypt
Lists show sealed rows — no decrypted previews sitting in memory. A single item is decrypted only when you open or copy it, then cleared.
Pair a device in seconds
Add a device with a QR scan, a short code, or your recovery phrase. Each device gets its own signing key — revoke any of them anytime.
Offline-first
Your notes live on your device and work with zero network. When devices reconnect, changes converge automatically — no conflicts lost.
Available when devices sleep
Optional relays store encrypted blocks so a clip is waiting even if every device was offline when you copied it. They never see plaintext or keys.
Recovery phrase, not passwords
A 24-word phrase restores everything on a new device. There's no password reset because there's no account on a server to reset.
Prove it yourself
Paste ships a one-click verifier — and a standalone CLI — that scans local storage and relay exports for any plaintext. Don't trust us; check.
Encrypted on your device. Always.
Your notes are encrypted on your device before they enter the peer-to-peer network. Relays store ciphertext only. We'd rather show you than ask you to trust us.
Local-only keys
Content is sealed with XChaCha20-Poly1305 using keys derived on your device from your recovery phrase. Keys never cross the network or the app's UI boundary.
Relays store encrypted blocks
Relays keep your encrypted blocks available when every device is asleep. They can see ciphertext and network metadata — never note plaintext or your keys.
Signed & tamper-evident
Every change is signed by an authorized device key. Receivers reject unsigned or unauthorized operations; modified ciphertext fails its authentication tag.
Verifiable, not just promised
Run the built-in verifier (or the independent CLI) to scan local stores, relay exports, and logs for known plaintext markers and confirm everything stored is AEAD-encrypted and signed.
Open source & auditable
The crypto envelope, sync engine, relay client and verifier are all open source — every line is readable, forkable, and independently re-implementable. Security you can't inspect isn't security.
$ paste --verify-encryption Local encryption passed Storage scan no plaintext found Log scan no plaintext found Op signatures valid · active device set Revoked-device test rejected after rotation Relay custody ciphertext root verified Limit: this does not prove physical deletion from third-party disks. Paste deletes by destroying keys (cryptographic erasure). RESULT: PASS — don't trust us, re-run it.
Up and running in three steps.
Create your vault
Open Paste. It generates a vault on-device and shows your 24-word recovery phrase once. Write it down — it's the only key.
Pair a device
On a second device, scan the QR or enter the short code. The two devices handshake directly and exchange an encrypted bootstrap.
Copy & paste
Copy anywhere. It's sealed locally and syncs peer-to-peer. Open or copy an item on any paired device to decrypt just that one.
Built on the Pear peer-to-peer stack.
The same encrypted core runs everywhere. Desktop ships today via the Pear runtime; native installers and mobile builds are in active development.
What we promise — and what we won't.
Security marketing is full of absolutes. Ours isn't. Knowing the exact edges of a guarantee is the guarantee.
What Paste guarantees
Note & clipboard bodies are encrypted with local-only keys before storage or replication. Every operation is signed by an authorized device key. Integrity is checked with AEAD tags and append-only logs. Relays receive ciphertext only. Anyone can run the verifier.
What we will not claim
Not anonymous — peers and relays can learn network metadata unless you add your own Tor/VPN transport. Not provable remote deletion — we destroy keys, but can't prove a third party didn't keep ciphertext. No "unbreakable." We tell you the limits in the app, the docs, and right here.
Straight answers.
Do you have my notes?+
What if I lose my device?+
Is it anonymous?+
Can you delete my data off a relay?+
Is there a login or cloud account?+
How do I know the encryption is real?+
One notepad. Everywhere you go.
Stop emailing yourself snippets and pasting secrets into chat. One fully-encrypted notepad, on every device you own — with nothing on anyone else's servers and nothing to sign up for.
Free · no account · open source & auditable · open verifier · macOS today, more platforms in development