From copy to safe paste in five steps.
One shortcut swap. Everything else happens locally, in under a second.
Copy
Copy anything as you normally would — a log, a config, a stack trace.
Press ⌘⇧V instead of ⌘V
The Safe Paste shortcut, wherever you’d normally paste — ChatGPT, Slack, a support ticket. On Windows and Linux it’s Ctrl+Shift+V in place of Ctrl+V — same guard, same one-second scan.
Local scan
PasteShield checks the clipboard on-device against its detector set and your custom rules. No network calls.
Preview
If something’s caught, you see what category it falls into — without needlessly exposing the original value.
Paste sanitized (or original)
Paste a sanitized version with placeholders swapped in, or paste the original anyway — your call, every time.
A high-severity example
[redacted — SSH private key]
—–END PRIVATE KEY—–
PasteShield flags this before the paste completes. You choose to paste the redacted placeholder or the original key.
No network calls, ever
Detection, preview, and sanitization all happen on-device. PasteShield doesn’t upload your clipboard, and it doesn’t keep a history of anything you copy.
Rolling out to a whole fleet? Same guard, managed centrally.
For IT teams managing a fleet of Macs, PasteShield deploys and updates like any other managed app — while every scan still happens locally, on each employee’s device.
MDM deployment
Silent install and updates via Jamf, Kandji, or Intune — no per-user setup.
Pushed rule sets
Distribute internal token and credential patterns to every device from one config.
Enforced, not optional
IT can lock Safe Paste settings so employees can’t disable scanning on managed machines.
Still zero cloud scanning
Centralized management doesn’t mean centralized clipboard data — detection stays on each device.