How to protect sensitive text when sharing online

Sort the text into one of three buckets before choosing a channel:

• Routine — a public link is fine; spelling and formatting are the only concerns.
• Inconvenient if leaked — an unlisted link with a short expiration is reasonable.
• A secret — passwords, keys, recovery codes, customer data: never paste it, unlisted or not.

Unlisted links are bearer links. They do not verify identity, and they cannot be un-guessed once someone has received them.

If the text is code or a log, sharing snippets and logs clearly has a redaction checklist.

• Deleting removes the stored paste; it cannot recall screenshots, downloads, or copied text.
• An expired link stops working for everyone, including you.
• Edit and delete links are capabilities: anyone who has one can use it.
• A paste link travels through chat services, ticket systems, and email — each of which keeps its own copy.

Send only what the recipient needs, and contact the recipients directly if a link reaches the wrong person.

Setting and managing expiration describes what the delete and edit links can still do.