Hey Product Hunt! I'm Salem, the maker of SecretPaste. The idea came from a moment of panic — I was debugging an API issue and almost pasted my OpenAI key directly into Claude. I caught it in time, but realized I'd been one Cmd+V away from leaking it many times before. As a DevOps engineer I've seen firsthand how credential leaks happen. It's rarely malicious — it's just muscle memory. You copy a key to test something, switch tabs, and paste without thinking. AI tools made this worse — now developers paste API keys dozens of times a day. So I built SecretPaste: - Intercepts paste events in AI chat windows before text is submitted - Detects secrets locally (OpenAI, Anthropic, AWS, GitHub, Stripe, and more) - 100% local — no data ever leaves your machine - Free tier covers the most common patterns - Pro adds masking (replaces the secret with a placeholder) and broader pattern coverage Two versions: - Chrome extension for AI chat sites (ChatGPT, Claude, Gemini, Perplexity) - Desktop app (macOS) that monitors clipboard system-wide The hardest part has been false positives — tuning patterns to catch real secrets without flagging random strings. I'd love honest feedback on that specifically. Happy to answer any questions!

SecretPaste

Stop leaking API keys into AI chats — locally

Stop leaking API keys into AI chats — locally