Stop pasting API keys and secrets into AI chats.
Scans pasted text locally when you paste into supported web-based AI chat interfaces in Chrome. If secrets are detected, it shows a warning and lets you mask them before the paste goes through — or blocks the paste entirely.
PasteGuard works on supported web-based AI chat interfaces.
OpenAI keys, Anthropic keys, GitHub tokens, Stripe live keys, AWS access keys, Google API keys, JWTs, private key blocks, bearer tokens, Slack tokens, Twilio tokens, database connection strings, .env assignments
- Load as unpacked extension in Chrome
- Open any AI chat site
- Paste normally — PasteGuard intercepts if secrets are found
- Choose: Mask Secrets & Paste or Paste Anyway or Cancel
- Warn & ask — shows dialog, you decide
- Block completely — blocks the paste, shows what was caught
- Off — disable via popup
PasteGuard runs only on the supported AI sites listed below. It inspects pasted text locally in your browser when you paste into a chat-style composer field on those sites. It does not send pasted text anywhere.
Chrome → chrome://extensions → Developer mode → Load unpacked → select this folder
storage— save your preferences (warn/block mode)- Host access on listed AI chat domains — intercept paste events in supported web chat interfaces
Zero external network calls. Zero data collection.