Secret Sanitizer – Paste Safely into AI Chats

Masks API keys, passwords and tokens before they reach AI chats. Runs locally. Nothing leaves your browser.

Code, logs and config files often contain secrets. Paste them into an AI chat and they end up on someone else's servers, often for good. Secret Sanitizer masks them the moment you paste, inside your browser, before anything is sent. HOW IT WORKS You paste: API_KEY=sk_live_51Hx9... The AI sees: API_KEY=[STRIPE_KEY_k3f9_0] • Only the secret is replaced. The rest of your text is untouched, so the AI still understands your code. • Masked something by mistake? Undo within 5 seconds. • Originals are kept in memory for 15 minutes, never written to disk, and gone when you close the browser. SMART RESTORE When the AI replies using your placeholders, copy the reply with the copy button or a keyboard shortcut. Your real values are back in your clipboard, ready for your editor or terminal. The web page never sees them. WHAT IT CATCHES Over 70 kinds of secrets: API keys, access tokens, passwords, database URLs, JWTs, private keys, credit card numbers, and Indian IDs such as Aadhaar, PAN and UPI. It also catches random-looking strings that have no known format, while everyday code, logs, hashes and stack traces stay readable. YOU STAY IN CONTROL • Pause for 10 minutes, or on one site, from the popup. The toolbar badge shows OFF. • If something is masked by mistake, click "Not a secret?" to allow that value or turn off the rule. • Turn any rule on or off. Each one has a plain-language name and an example. • Test any text in the popup to see what would be masked before you paste it. PRIVATE BY DESIGN No account. No tracking. No network requests of any kind. Open source under the MIT licence, so you can check every claim yourself. WHERE IT WORKS ChatGPT, Claude, Gemini and Grok out of the box. Perplexity, DeepSeek, Copilot, Mistral and Meta AI with one click. Any other site can be added, and Chrome asks for your permission first. Not affiliated with or endorsed by any of these services. GOOD TO KNOW Only pasted text is checked, not text you type or files you upload. No detector is perfect, so review sensitive text before sending. Source: https://github.com/souvikghosh957/secret-sanitizer-extension Website: https://secretsanitizer.com