Never accidentally leak API keys, tokens, or credentials to AI chatbots again.
A browser extension that automatically detects and masks secrets when you paste code into AI platforms like ChatGPT, Claude, and Gemini.
- Install the extension from Chrome Web Store
- Paste your code into any AI platform
- Relax - secrets are automatically masked
No configuration needed. Just install and go.
- 33 Built-in Patterns: AWS keys, GitHub tokens, private keys, passwords, database URLs, and more
- Real-time Masking: Secrets masked instantly as you paste
- Smart Detection: Context-aware pattern matching prevents false positives
- Copy & Restore: Copy masked text and automatically restore original values
- AI-Safe Workflow: Paste masked → AI processes → Copy restored secrets
- Works Everywhere: Manual copy (Ctrl+C) and platform copy buttons
Pre-configured for popular AI platforms:
- ChatGPT (chatgpt.com)
- Claude (claude.ai)
- Google Gemini (gemini.google.com)
- Perplexity (www.perplexity.ai)
- Grok (grok.com)
- 8 Category Toggles: Cloud keys, API tokens, private keys, passwords, database, network, PII, custom
- Custom Patterns: Add your own patterns for company-specific secrets
- Per-Site Control: Enable/disable protection for each site
- Usage Statistics: Track how many secrets you've protected
Before (what you copy):
const config = {
awsAccessKey: 'AKIAIOSFODNN7EXAMPLE',
githubToken: 'ghp_1234567890abcdefghijklmnopqrst',
database: 'postgres://admin:secret@db.example.com/prod'
};After (what AI sees):
const config = {
awsAccessKey: '[AWS_KEY#a3f7]',
githubToken: '[GITHUB_TOKEN#b2e9]',
database: 'postgres://[USER#c4d1]:[PASS#e8f3]@[HOST#f9a2]/prod'
};Restoration (when you copy back):
- Click copy button on AI response → Original secrets automatically restored
- Press Ctrl+C on masked text → Original secrets in clipboard
- AWS Access Key ID
- Google Cloud API Key
- Azure Connection String
- GitHub, GitLab, NPM tokens
- JWT, Bearer tokens
- OpenAI, Stripe, SendGrid API keys
- Slack, Discord webhooks/tokens
- RSA, EC, SSH private keys
- PGP private keys
- SSL/TLS certificates
- Password field assignments (
password = "...") - Environment variable passwords
- MySQL CLI passwords
- Curl basic auth
- PostgreSQL, MySQL, MongoDB, Redis URLs
- JDBC connection strings
- IPv4 addresses
- Full URLs
- HTTP endpoints
- Email addresses
- Create unlimited patterns for company-specific secrets
- Full regex support
- Per-pattern usage statistics
- 100% Local Processing: All detection happens in your browser
- No Cloud, No Servers: Your data never leaves your device
- No Telemetry: Zero analytics, zero tracking
- Minimal Permissions: Only requires
storagepermission - Open Source: Full source code available for audit
Install from Chrome Web Store - Click "Add to Chrome" and start using immediately.
-
Clone the repository:
git clone https://github.com/ManishPrakkash/Secure-Paste.git cd secure-paste -
Install dependencies:
npm install
-
Build the extension:
npm run build
-
Load in Chrome:
- Open
chrome://extensions/ - Enable "Developer mode"
- Click "Load unpacked"
- Select the
distfolder
- Open
- TypeScript (strict mode)
- React 18 with Hooks
- Vite 5
- Tailwind CSS 3
- Chrome Extension Manifest V3
npm run dev # Development build with watch mode
npm run build # Production build
npm run type-check # Type checkingContributions are welcome! Please feel free to submit a Pull Request.
- Fork the repository
- Create your feature branch (
git checkout -b feature/amazing-feature) - Commit your changes (
git commit -m 'feat: add amazing feature') - Push to the branch (
git push origin feature/amazing-feature) - Open a Pull Request
MIT License - see LICENSE file for details.
Copyright (c) 2025 Secure Paste
- Issues: GitHub Issues
Made with ❤️ for developers who care about security