PasteGuard
Paste into AI. Keep the secrets.
A free Chrome extension that masks emails, phone numbers, card numbers, API keys and client names the moment you paste into ChatGPT, Claude or Gemini. Then it shows you the real values in the AI's reply. Everything runs locally.
🌐 Website + live demo · 🧩 Add to Chrome · Privacy policy
Why
People paste client emails, support tickets, spreadsheets and code into AI chat tools every day. Those pastes are full of names, emails, phone numbers, card numbers and API keys that shouldn't leave the company. Blocking AI tools doesn't work, and enterprise security tools are priced for large companies.
PasteGuard is a seatbelt: it's invisible until it's needed, and it doesn't change how you work.
How it works
You paste: Priya Shah ([email protected]) says card 4111 1111 1111 1111 was charged twice
AI receives: [PERSON_1] ([EMAIL_1]) says card [CARD_1] was charged twice
AI replies: Hi [PERSON_1], we've refunded the duplicate charge on [CARD_1]…
You see: Hi Priya Shah, we've refunded the duplicate charge on 4111 1111 1111 1111…
- Catch. It reads the clipboard text in the paste event, before the chat box gets it.
- Mask. Sensitive values become stable placeholders. The same value always gets the same placeholder, so the AI's answer stays coherent.
- Restore. When the reply mentions a placeholder, the real value is swapped back on your screen only and highlighted. The text box you type in is never touched.
What it detects
25 detectors in three layers. Everything runs locally; no AI model is involved.
1. Patterns with checksums
| Detector | Example | Validation |
|---|
| Card number | 4111 1111 1111 1111 | Luhn checksum |
| IBAN | DE89 3704 0044 0532 0130 00 | Mod-97 checksum |
| Aadhaar | 2341 2341 2346 | Verhoeff checksum |
| PAN, GSTIN, IFSC, UPI ID | ABCPE1234F, 27ABCDE1234F1Z5, HDFC0001234, name@okicici | Format |
| US SSN | 123-45-6789 | Excludes invalid ranges |
| Email, phone, IP address | +91 98765 43210, 10.24.8.112 | Digit counts, octet ranges; ignores dates, amounts, versions |
| API keys | OpenAI, Anthropic, Stripe, AWS, GitHub, GitLab, Slack, Google, Hugging Face, Groq, xAI, SendGrid, Shopify… | Known prefixes |
| JWTs, private keys, crypto wallets | eyJ…, -----BEGIN PRIVATE KEY-----, 0x71C7… | Structure |
| Unknown secrets | Q7mZp3Xc9LkT2vBn8RwY4hJd6FsGa1Ue | Entropy check; skips hashes, UUIDs and variable names |
2. Context: the words around a value
| Detector | Catches |
|---|
| Passwords / secrets | password: …, DB_PASSWORD=…, postgres://user:PASS@host, ?token=… |
| Card CVV / expiry | CVV 123, expiry 12/29 |
| PIN / OTP | OTP is 482913 |
| Date of birth | DOB: 14/08/1991 |
| ID numbers | client ID HLX-00482, study ID ONC-2026-0117, IRB approval number IRB-77421, account number …, passport … |
| Names | Dr. Ananya Rao, finance officer Rohan Deshmukh, Name: Rahul Verma, Hi Priya, common first + last names |
| Addresses | 21 Research Park Road, Cambridge, MA 02139, Flat 4B, 12 MG Road, Bengaluru 560001 |
| Organisations | Helix Biosciences Inc., … Labs, … Technologies |
| Project codenames | Project Aurora, Operation … |
3. Inference and propagation
[email protected] → also masks Priya Shah and Northwind wherever they appear- Once
Helix Biosciences Inc. is found, a later bare Helix is masked too
- Your own terms:
Acme Corp => CLIENT in the popup
Checksums and context keep false alarms low: order numbers, invoice numbers, dates, money, version numbers, commit hashes and UUIDs are left alone. See dev/test-detectors.js.
Works on: ChatGPT, Claude, Gemini, Microsoft Copilot, Perplexity, DeepSeek, Mistral Le Chat, Poe.
Install
Add PasteGuard to Chrome → One click, free, updates automatically. Works in Chrome, Edge, Brave and Arc.
Manual install (for developers):
- Download
pasteguard-extension.zip and unzip it.
- Open
chrome://extensions and switch on Developer mode.
- Click Load unpacked and select the unzipped
pasteguard folder.
- Pin the 🛡️ icon, then paste something sensitive into ChatGPT.
Privacy
- No servers. There's no backend. The extension makes no network requests.
- Memory-only vault. The placeholder → value map lives in
chrome.storage.session, which is wiped when the browser closes.
- One permission:
storage. It runs only on the AI chat sites listed above.
- No analytics. Usage stats (counts only, never values) stay on your device and are shown only in the popup.
Full policy: PRIVACY.md
This is the beginning of the README. Read the rest at the original. Read the full README ↗
