getpost

End-to-end encrypted file sharing on Cloudflare Workers. No accounts, no tracking, globally distributed.

All uploads are encrypted in your browser before leaving your device. The server never sees your plaintext or your passphrase.

web upload

Drop a file on the main page. A passphrase is generated automatically. Share the resulting link — the passphrase is embedded in the URL fragment (never sent to the server).

command line

# basic upload
curl --data-binary @myfile.txt https://staging.getpost.workers.dev/about

# upload from clipboard (macOS)
pbpaste | curl --data-binary @- https://staging.getpost.workers.dev/about

# custom expiration (1 hour)
curl -H "X-TTL: 3600" --data-binary @file.txt https://staging.getpost.workers.dev/about

CLI uploads are stored unencrypted unless you encrypt first — see below.

encrypted command line

This instance serves its own E2E encrypted CLI client (needs python3 and PyNaCl):

# fetch the client from this instance
curl -sO https://staging.getpost.workers.dev/pastebin-crypted.py

# encrypted upload (prints a share link with the passphrase in the fragment)
echo "secret" | PASTEBIN=https://staging.getpost.workers.dev python3 pastebin-crypted.py

# encrypt a file
PASTEBIN=https://staging.getpost.workers.dev python3 pastebin-crypted.py myfile.txt

one-liner script

Save as /usr/local/bin/pastebin and make executable:

#!/bin/bash
curl --data-binary @${1:--} https://staging.getpost.workers.dev/about

Usage: pastebin myfile.txt or echo "hello" | pastebin

features

• E2E encryption — NaCl SecretBox (XSalsa20-Poly1305) + Argon2id key derivation
• Text & markdown rendered automatically
• Images, PDFs, videos, any file up to 10 MB
• Append &raw to any link for the original file
• Default expiry: 1 year, configurable via X-TTL header (seconds)
• Every upload gets a unique delete key

headers & parameters

# custom expiration
X-TTL: 3600          # seconds until expiry

# URL parameters
?raw                 # return original file
?cors=1              # enable CORS headers

# delete a post (deletion requires POST; GET shows a confirmation page)
curl -X POST "https://your.domain/post?key=KEY&del=DELETE_KEY"

deploy your own

GetPost runs on Cloudflare Workers — zero servers, global distribution, generous free tier (100k reads, 1k uploads daily).

• Clone: git clone https://github.com/getpost-loves-you/getpost
• Setup: follow SETUP.md
• Deploy: ./deploy.sh mydomain

technical details

• Architecture: Cloudflare Workers + KV storage, edge computing
• Encryption: NaCl SecretBox + Argon2id (4 iterations, 64 MB memory)
• IDs: ULID-based, separate delete tokens
• Performance: sub-100ms response times worldwide