diff --git a/js/privatebin.js b/js/privatebin.js
index d80ae75..98d9c9a 100644
--- a/js/privatebin.js
+++ b/js/privatebin.js
@@ -5386,6 +5386,10 @@ jQuery.PrivateBin = (function($, RawDeflate) {
             if (Model.hasDeleteToken()) {
                 return;
             }
+            // always reload on back button to invalidate cache(protect burn after read paste)
+            window.addEventListener('popstate', () => {
+                window.location.reload();
+            });
 
             // display an existing paste
             return me.showPaste();