Safe Paste shortcut Runs locally

Keep secrets out of AI prompts.

Use BeforePaste when you send code, logs, or config to AI. Copy text as usual, press Safe Paste (Cmd+Ctrl+V on macOS), and secrets become named placeholders on your device. Normal paste stays unchanged.

Download macOS View local source

Safe Paste shortcut
Normal paste unchanged
Runs on your machine
No clipboard history
No prompt upload

Processing: Local only
Trigger: Safe Paste shortcut
Clipboard: Restored after paste
Account: Not required

1 Read clipboard
2 Press Safe Paste
3 Paste placeholders

Clipboard .env copied

OPENAI_API_KEY=sk-live-9f4e...
DATABASE_URL=postgres://admin:...
STRIPE_SECRET_KEY=sk_live_51...

Shortcut Cmd+Ctrl+V

Safe Paste selected. Rewrite this paste payload locally.

Pasted into AI placeholders only

OPENAI_API_KEY=[OPENAI_API_KEY]
DATABASE_URL=[DATABASE_URL]
STRIPE_SECRET_KEY=[STRIPE_SECRET_KEY]

One clipboard, two deliberate actions.

Use normal paste when you need the original value. Use Safe Paste when the destination is an AI prompt. The redacted version keeps the context readable without handing over credentials.

Normal paste

Keep the original value

Editors, `.env`, GitHub Secrets, Vercel Env, and other trusted fields keep receiving the raw clipboard text.

STRIPE_SECRET_KEY=sk_live_51...

Safe Paste

Paste a named placeholder

AI chats, desktop AI apps, terminal agents, and plugin panels receive readable placeholders instead of secrets.

STRIPE_SECRET_KEY=[STRIPE_SECRET_KEY]

Clipboard tools need clear boundaries.

BeforePaste is a desktop utility because this decision belongs on your machine. The product boundary is narrow: handle the current Safe Paste action, redact locally, paste the safe payload, and avoid hosted prompt processing.

Source on GitHub The repository gives security-conscious users a way to inspect the app logic, review changes, and build locally.

Local redaction Secret detection and replacement run on the user's machine.

No prompt upload The clipboard payload is not sent to a cloud classifier.

No clipboard history The app handles the current paste flow. It is not a clipboard archive.

Normal paste unchanged BeforePaste does not change your everyday paste path. Choose Safe Paste only when you want redaction.

No proxy setup BeforePaste does not ask you to change model endpoints, base URLs, or AI provider settings.

Minimal local settings Shortcut, redaction style, launch behavior, and update checks stay understandable in Preferences.

Quit when needed The menu bar or tray control keeps exceptional workflows explicit.

Know exactly what works today.

BeforePaste is not a generic DLP product and no longer depends on automatic target classification. The first product surface is a simple Safe Paste shortcut, local redaction rules, and a small Preferences panel.

Platform scope

Platform Desktop app Normal paste Safe Paste

macOS Available Unchanged Cmd+Ctrl+V

Windows Planned Unchanged Shortcut-first

Linux Planned Unchanged CLI/TUI first

Paste model

Safe Paste shortcut Default path. Press the explicit shortcut only when you want a redacted paste.

Local redaction rules Named placeholders preserve context while keeping raw credentials out of the AI prompt.

Local actions and permissions

AccessibilityPerforms the final Safe Paste action when macOS asks for it.

Clipboard restoreReads the current clipboard, writes the redacted payload, then restores the original value.

Optional diagnosticsLocal tests check the shortcut, paste action, and redaction without uploading prompts.

What the app exposes

Status shown

Safe Paste ready Last local test

Controls exposed

Shortcut Redaction style Test Safe Paste Updates

Use it wherever AI asks for context.

Product names below are workflow examples, not automatic detection promises or partnership claims. Because Safe Paste is explicit, it works across browser chats, desktop AI apps, terminals, editors, and plugin panels without classifying the window.

Copy once. Use normal paste for trusted fields. Use Safe Paste when the same clipboard is going into an AI prompt.

AI websites and apps

GPTChatGPTSafe Paste CClaudeSafe Paste GGeminiSafe Paste DBDoubaoSafe Paste DSDeepSeekSafe Paste KKimiSafe Paste QWQwenSafe Paste PPerplexitySafe Paste COCopilotSafe Paste GRGrokSafe Paste MMMiniMaxSafe Paste GLMChatGLMSafe Paste

Terminal AI tools and plugin panels

CXCodexSafe Paste CCClaude CodeSafe Paste CLIGemini CLISafe Paste AIaiderSafe Paste CTContinueSafe Paste OCOpenCodeSafe Paste

The shortcut-first model avoids the brittle editor-versus-terminal detection problem.

Raw text stays with normal paste

ENV.envNormal paste GHGitHub SecretsNormal paste VEVercel EnvNormal paste EDlocal editorsNormal paste

Redaction coverage is specific, not mystical.

BeforePaste ships a generated detection catalog instead of a vague "sensitive data" promise. The default path favors everyday developer clipboard text and avoids broad catch-all scanning unless you turn it on.

857 built-in patterns

43 coverage buckets

Balanced by default Deep scan and entropy scan are available, but off by default for precision.

Cloud credentials AI API keys GitHub and GitLab tokens Payment keys Database URLs Private key blocks dotenv assignments Structured credentials Common PII

Read the generated catalog in DETECTION_COVERAGE.md.

Start with the menu bar app.

The default workflow is intentionally small: install the app, keep the menu bar item running, and use the Safe Paste shortcut only when the clipboard is going into an AI prompt.

Install

Install the desktop app

Download the macOS app, open it, and keep the BeforePaste menu bar item running.
Shortcut

Confirm Safe Paste

The default shortcut is Cmd+Ctrl+V on macOS. Change it in Preferences if it conflicts with your setup.
Copy

Copy the context as usual

Code, logs, `.env` snippets, stack traces, and config fragments can stay in your normal clipboard.
Paste

Press Safe Paste in the AI prompt

BeforePaste redacts locally, pastes placeholders, and restores your original clipboard after the paste.
Tune

Test redaction rules locally

Use Preferences to test Safe Paste, change placeholder style, and check for updates.

Download BeforePaste

The macOS desktop app is available now. Windows is planned as a shortcut-first tray app. Linux starts with CLI/TUI and manual redacted-copy workflows before desktop paste automation.

macOS

macOS

Menu bar app with Safe Paste shortcut. Normal paste stays unchanged.

Download for macOS

Windows

Windows

Shortcut-first tray app is planned next.

Planned

Linux

Linux

CLI/TUI and manual redacted-copy support first; desktop paste automation later.

Planned

Release notes and checksums: GitHub Releases

Questions people ask before installing.

Does BeforePaste upload my clipboard?

No. Redaction runs locally. BeforePaste is not a cloud classifier, prompt proxy, or clipboard history product.

Does normal Cmd+V change?

No. Normal paste keeps the system behavior. Use the Safe Paste shortcut only when you want a redacted paste for AI.

Why does macOS ask for permissions?

Safe Paste may need Accessibility to perform the final paste action and restore the clipboard. Optional local diagnostics can also ask macOS for automation access. The default workflow does not process normal Cmd+V.

What kinds of secrets are redacted?

BeforePaste ships a generated rules catalog for AI API keys, cloud credentials, payment keys, database URLs, private keys, dotenv assignments, structured credentials, and common PII.

What is available on Windows and Linux?

The macOS desktop app is available now. Windows is planned as a shortcut-first tray app. Linux starts with CLI/TUI and manual redacted-copy workflows before desktop paste automation.

Is this a proxy, DLP tool, or AI firewall?

No. BeforePaste protects a paste action on your device. It does not route prompts, change model endpoints, enforce enterprise policy, or inspect AI responses.

Can I inspect or build it myself?

Yes. The source code, releases, checksums, and build instructions are available from the GitHub repository.