Don't paste your secrets into AI chats.

Paste Guard checks what you paste into ChatGPT, Claude, Gemini and more. If it finds an email, API key, card number, Aadhaar, PAN or UPI ID, it offers to paste a masked version instead. Everything happens on your device.

Chrome Web Store: coming soon Try the scanner

Free. No account. No tracking. Nothing is uploaded: you can check that in your browser.

The extension's dialog, rebuilt with made-up data: you paste rahul.sharma@example.com, it pastes [EMAIL_1]. The same value always gets the same number inside one paste.

What you get

  • It catches what people forget

    Emails, phone numbers, cards, Aadhaar, PAN, UPI IDs, IFSC, GSTIN, IBAN, API keys from many providers, private keys and passwords in connection strings. See the full list.

  • You stay in control

    Paste masked, paste anyway, or cancel. Press Ignore on a value and it is never flagged again.

  • Private by design

    No network requests, no analytics, no remote code, no account. It reads text only at the moment you paste, and only on the sites listed below.

What it catches

With scripting on, hover, focus or press a chip to see a made-up example. It is a safety net, not a guarantee: it matches common patterns and can miss unusual formats.

Contact

Cards and banking

India IDs

International IDs

Secrets

Try the detectors without installing

The scanner page runs the same detector code as the extension, in your browser, on text you paste. It shows what would be found and the masked version. Nothing is uploaded.

After you install, a welcome page opens with a practice box that uses the real dialog. The scanner page is the quick way to try the detectors first.

Open the scanner

Verify it yourself

You should not have to take our word for it. These checks take about five minutes.

  1. Permissions

    Open chrome://extensions, click Details on Paste Guard. It asks only to read and change data on the AI sites listed below. Its only API permission is storage, for your settings.

  2. No network

    On chrome://extensions turn on Developer mode, click Inspect views: service worker and open the Network tab. Then right-click the toolbar icon and choose Inspect popup, open its Network tab and change a setting. Both stay empty.

    Illustration, not a screenshot: what an empty Network panel looks like.

  3. Watch a paste

    On a supported site, open DevTools, go to Network, and paste a fake key such as AKIA plus 16 capital letters. The warning appears and no request is made by the paste.

    Illustration, not a screenshot: what an empty Network panel looks like.

  4. Read what is stored

    In the popup's DevTools console run chrome.storage.local.get(null, console.log). You will see settings, a counter and, if you used Ignore, one-way hashes. Never pasted text.

  5. Inspect the installed files

    The extension's JavaScript is delivered to your browser and can be inspected in the installed package. Open chrome://extensions, click Details on Paste Guard, then open DevTools on its popup or service worker (Inspect popup, or Inspect views with Developer mode on) and browse its files in the Sources tab. This site does not publish the source code.

Protected sites

  • ChatGPT (chatgpt.com)
  • Claude (claude.ai)
  • Gemini (gemini.google.com)
  • Perplexity (perplexity.ai)
  • Copilot (copilot.microsoft.com)
  • Grok (grok.com)
  • DeepSeek (chat.deepseek.com)
  • Mistral (chat.mistral.ai)

Paste Guard does nothing on any other website.

Watch the real extension

A 10-second recording of the real extension in a stand-in chat page, with made-up data: a paste containing an email, an API key, a UPI ID and a card number triggers the dialog, and Paste masked inserts [EMAIL_1], [API_KEY_1], [UPI_1] and [CARD_1]. No sound.

Read more