Mask & Paste

Automatically mask detected secrets before pasting into AI chats.

How It Works

When SecretPaste detects a secret in your clipboard and you choose "Mask" from the warning modal, the secret is replaced with a safe, redacted version before being pasted.

Masking Format

Secrets are masked using a partial format that preserves the prefix and last 4 characters for identification:

sk-abc123xyz789secretkey456sk-****y456
ghp_abcdef123456789012345678901234567890ghp_****7890

Special Cases

Private Keys

Private keys are fully redacted for maximum security:

-----BEGIN PRIVATE KEY----- → [PRIVATE KEY REDACTED]

Multiple Secrets

If your clipboard contains multiple secrets, each one is masked independently while preserving the rest of your text.

When to Use Mask

Good Use Cases

  • • Sharing code snippets with embedded keys
  • • Debugging API issues without leaking secrets
  • • Asking about error messages containing tokens

Consider Alternatives

  • • Use "Cancel" if you don't need to paste at all
  • • Use "Allow" for public/test keys
  • • Edit your clipboard manually first

Pro Feature

The Mask & Paste feature is available on the Pro plan. Free users can still cancel the paste or add secrets to their allowlist.