Skip to content
What PasteCloak checks before you paste.
Category-specific detection, not a black box. Here’s exactly what it looks for.
API Keys
OpenAI, Anthropic, AWS, GitHub, GitLab, and Stripe key formats, matched by their known prefixes and structure.
sk-ant-••••••••••••Bearer Tokens & JWTs
Authorization: Bearer headers and JWTs, matched by their structure.
Bearer eyJhbGciOi••••••Passwords in Code
Hardcoded credentials in config files, .env dumps, and inline scripts.
DB_PASSWORD=••••••••DB Connection Strings
Postgres, MySQL, MongoDB, and Redis URIs with embedded credentials.
postgres://user:••••@host/dbPrivate Keys
PEM and OpenSSH private key blocks, matched at the header/footer boundary.
—–BEGIN PRIVATE KEY—–Custom Rules
Define your own patterns for internal tokens, proprietary formats, or company-specific identifiers.
ACME_INTERNAL_••••••Standard vs. Pro
| Feature | Standard (€19 one-time) | Pro (€39 one-time) |
|---|---|---|
| Safe Paste shortcut (⌘⇧V) | Included | Included |
| Core detector set | Full | Full |
| Custom rules | Up to 3 | Unlimited |
Frequently asked questions
No. Detection, preview and sanitization run entirely on your computer, and your clipboard content is never sent anywhere. The app makes no network connections. You download it from this site, or IT installs it.
No tool can guarantee that. PasteCloak meaningfully reduces risk — it doesn’t eliminate it.
No. The 14-day trial and your license both work without an account.
PasteCloak doesn’t keep a history of anything you copy. It’s a security tool, not a convenience tool.
