PII Guard

Detects personal data and secrets in what you type or paste into web pages, and redacts it locally — before it ever leaves your browser. No backend, no accounts, no telemetry.

Why PII Guard

Live redaction

Catches PII the moment you type or paste it, swaps it for a mask like [EMAIL], and shows an on-page notification with one-click undo.

Built-in detectors

Email addresses, phone numbers (including Indonesian +62/08xx), credit cards, IBANs, API keys/secrets, and Indonesian NIK/KK and NPWP numbers.

Per-site control

Toggle protection for the current site from the popup, or manage named whitelist profiles (e.g. "Work" / "Personal") with bulk import from a .txt file.

Custom rules

Add your own regular-expression detectors for anything specific to your own work that the built-in rules don't cover.

Optional settings password

Lock down configuration changes with a locally-hashed password (PBKDF2-SHA256) — useful on shared or managed devices.

100% local

No backend, no network permissions, no analytics. Settings live in this browser's local storage only — never synced to the cloud.

See it in action