Redaktyn — Stop Secrets Leaving The Browser

Blocks secrets your team has registered from being pasted or uploaded into AI tools. Matching happens on your device, not ours.

Redaktyn stops secrets from leaving your browser. WHAT IT DOES Register the strings that matter to you — an API key, a database connection string, an internal hostname, a customer identifier. Any string, not a fixed list of key formats. Every tab then checks pastes, drops and file uploads against them and blocks the ones that match before they reach the page. The check takes under a millisecond, so you will not notice it until it saves you. THE SECRET ITSELF NEVER LEAVES YOUR MACHINE Redaktyn stores an HMAC-SHA256 fingerprint of your secret, not the secret, and matches against that fingerprint locally. There is nothing on a server to leak. Obfuscated variants are caught too — spaced out, case-folded, or base64-encoded. TRY IT WITH NO ACCOUNT Open the popup and choose "protect secrets on this device only". Register any string with a passphrase, then try pasting it into any website. Everything in this mode is local: the extension makes no network request at all until you join an organisation. FOR TEAMS An administrator enrols secrets once and every enrolled browser inherits them, with an org-wide log of what was blocked and where. That log records the administrator's label for the secret — never its value, and never the text you pasted. WHAT IT DOES NOT DO • It does not read your clipboard. Detection uses the paste event already being delivered to the page, so no clipboard permission is requested. • It does not track your browsing. A page address is recorded only when a block actually happens, and only as protocol, host and first path segment. • It does not send the text you pasted anywhere. WHY IT ASKS FOR ACCESS TO ALL SITES A secret can be pasted into any website, so the check has to run everywhere — a fixed list of sites would leave silent gaps and defeat the point. That access lets the extension read the page you are already on. It is not network reach: the extension only ever communicates with one origin, redaktyn.com. Privacy policy: https://redaktyn.com/privacy