AI data leak prevention
The Accidental Leak: What Happens When a Stack Trace Lands in ChatGPT
A walkthrough of how ordinary debugging habits end up exposing credentials to AI tools — and where the redact step should belong.
Read more →Before you paste into an AI tool, Slack or a support ticket, check it for keys and passwords. Press ⌘⇧V on Mac instead of a normal paste, and PasteCloak scans your clipboard before the paste completes.
macOS 12+ · 14 days free, every feature · No account required · No clipboard history
The problem
In a 2023 Cyberhaven study of about 1.6 million workers, about 11% of what employees pasted into ChatGPT was confidential. PasteCloak covers one part of that: credentials.
Source: Cyberhaven Labs, 2023
Plain-category detection for the secrets developers paste most — no vague "AI-powered" claims, just the patterns it actually looks for.
OpenAI, Anthropic, AWS, GitHub, GitLab, and Stripe key formats.
Authorization: Bearer headers and JWTs, matched by their structure.
Hardcoded credentials in config files, .env dumps, and scripts.
Postgres, MySQL, MongoDB, and Redis URIs with embedded credentials.
PEM and OpenSSH private key blocks.
Define your own patterns for internal tokens or proprietary formats.
A security tool, not a convenience tool.
| Capability | PasteCloak | Generic clipboard manager | Enterprise DLP |
|---|---|---|---|
| Keeps a clipboard history | No, never | Yes, usually | Varies |
| Works without a vendor console or cloud | Yes | Varies | No, centrally managed |
| Built specifically for secrets | Yes | No | Broader: secrets are one of many data types |
| Requires IT rollout | No | No | Yes |
Endpoint DLP agents do run on the device. They report to a central console that IT manages.
For individuals, no subscription: pay once, keep it. Try every feature free for 14 days.
Standard
€19
One-time license, no subscription
Safe Paste shortcut (⌘⇧V)
Full core detector set
Up to 3 custom rules
Local processing, no account required
Business
On quote
Annual, per seat · from 5 seats
Deployment through your MDM, not yet tested on a live MDM
Shared rule sets pushed to every Mac
Locked settings on managed machines
One organisation key
Not sure yet? Download the free trial: every feature for 14 days, no account, no card. Your license key arrives by email right after purchase and works offline. One-time licenses include all 1.x updates.
Notes on clipboard hygiene and safer pasting, written for developers — no fear tactics, no absolutes.

AI data leak prevention
A walkthrough of how ordinary debugging habits end up exposing credentials to AI tools — and where the redact step should belong.
Read more →
API key hygiene
Rotation habits, scoping, and the small workflow changes that keep keys out of chat logs and support tickets.
Read more →
Research
A closer read of the study behind the “11% of what’s pasted into ChatGPT is confidential” number, and what it means day to day.
Read more →