OctoPaste Chrome extension security report

🔐 OctoPaste - Zero-Knowledge Encrypted Paste Sharing Developed by OctoSEC Share code snippets and text with complete privacy. Your content is encrypted locally in your browser BEFORE it ever leaves your device. The server never sees your data. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ✨ FEATURES • One-Click Sharing - Select text, right-click, choose "Upload to OctoPaste" • Upload from Clipboard - Quick upload button in the extension popup • End-to-End Encryption - AES-128-GCM encryption happens entirely in your browser • Zero-Knowledge - We literally cannot read your pastes, even if we wanted to • Auto-Copy - Share URL is automatically copied to your clipboard • Customizable Expiration - 10 minutes, 1 hour, 1 day, 7 days, 30 days, or never • Burn After Read - Self-destructing pastes for sensitive content • Syntax Highlighting - Support for 20+ programming languages ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🔒 HOW THE ENCRYPTION WORKS 1. You select text and click "Upload to OctoPaste" 2. A random 128-bit AES encryption key is generated in your browser 3. Your content is encrypted locally using AES-128-GCM 4. Only the encrypted blob is sent to our servers 5. The decryption key is added to the URL after the # symbol 6. Browsers NEVER send the # fragment (URL hash) to servers 7. Only someone with the complete URL can decrypt your content The encryption key exists only in the URL fragment. This means: - The server never receives your key - We cannot decrypt your pastes - Your data remains private even from us ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ ⚙️ SETTINGS • Default expiration time • Default programming language for syntax highlighting • Content type (code, markdown, file) • Burn after read toggle ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 🛡️ PRIVACY FIRST • No account required • No tracking or analytics • No personal data collection • Server never sees your encryption key • Open source and auditable ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ 💻 SUPPORTED LANGUAGES Plain Text, JavaScript, TypeScript, Python, Rust, Go, Java, C++, C, C#, PHP, Ruby, Swift, Kotlin, SQL, HTML, CSS, JSON, YAML, XML, Markdown, Shell, PowerShell, and more. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Perfect for developers, IT professionals, and anyone who values privacy when sharing sensitive information like code snippets, API keys, configuration files, or private notes. Website: https://octopaste.io