What's New

The changes you'd notice, newest first.

0.9.24 · November 2026

• Fixes and small improvements.

Build fingerprint d37efc2e24357f47a006915ec739a19ef31065c73d674d5e572f61395e771769

0.9.23 · November 2026

• Fixes and small improvements.

Build fingerprint 419bc0439d0ecd895018152a062ffbc91f6363c12cd4267afbedc140c25396b6

0.9.22 · November 2026

• Fixes and small improvements.

Build fingerprint 8c364825786273fc6c276db774d695bc726cf3da9bb5cef0b3319a858b1474b1

0.9.21 · November 2026

• Fixes and small improvements.

Build fingerprint 587fb7ff5177b2409402c0fd30ae576ad6d49f0fceb6e01e54b7f843b3ee9fec

0.9.20 · November 2026

• Fixes and small improvements.

Build fingerprint 294845bb4b785cc5faa0aafd7628d26d958531586d1d3ebd51569de761482467

0.9.19 · October 2026

• Fixes and small improvements.

Build fingerprint caffdf3bef1dfe587a3b45aadec8e2ace8f59fbd6b7510fdea750d0ff15616bb

0.9.18 · October 2026

• Every new install of the extension and the Mac app starts with a week of Guardpup Pro, with no account: screenshots and files, your own protected items and automatic masking. After it, text stays protected for free.
• Shorter, clearer text across the extension, the Mac app and the Windows app. The Mac menu's privacy items are now under Privacy.

Build fingerprint 9664b694fdd52f9434b3ac7f48d4304462bf6daa68218f8f8e5fad876462e2e5

0.9.17 · October 2026

• The screenshot reader's library carries everything it needs inside the extension, with no download addresses left in it.
• Mac app: the disk image says to quit Guardpup before replacing it by hand. Updating with "Quit and Update" needs nothing.

Build fingerprint 6f5cbeb63373f15d7df59414293c6662e07cf2acf850d010bcdc3de5aa4b1dce

0.9.16 · October 2026

• Mac app: updates in place. When a new version is out, "Quit and Update" downloads it, checks it's signed by Guardpup, and opens the new one; no more dragging, and your settings stay. Install this version by hand once (quit Guardpup first, then drag it into Applications).

Build fingerprint 500f01693b34a8dbce65c20bab2b4e3bd9bff72de6218cdbd1aac3190fe54ddf

0.9.15 · October 2026

• Rocky's menu and the Mac and Windows apps say which apps are tested (ChatGPT, Claude and Gemini) and which are still being tested.
• Mac app: it says plainly that in Cursor, VS Code and Devin it checks screenshots you paste, not text.
• Mac app: the download opens with a "Drag Guardpup to Applications" window.

Build fingerprint d0ffe66c2cb9f8ac95dbb1c70aef4cb9582a7ab6770ba26762ff0c6068cd8462

0.9.14 · October 2026

• A purchase, cancellation or refund on guardpup.io shows in the extension and the Mac app within minutes, and at once when you open Rocky's menu.

Build fingerprint 9c9715064fd3f3401125da45ad86221acfa76040ee2ab6d8bb334e96fdf0e062

0.9.13 · October 2026

• Rocky's menu has a Pro line: sign in, start a free trial or upgrade, right there.
• Pro you buy, start or redeem with a tester code on guardpup.io switches on right away in the extension and the Mac app, instead of at the next daily check.

Build fingerprint 0cac2b9051365ec5173542483bdf8a9a2211bb36b497eded50db8cf3c8a173a1

0.9.12 · October 2026

• Screenshots, files, automatic masking and your own protected items are now Guardpup Pro. Try it free for 7 days, no card: in Rocky's menu, choose Sign In or Start a Free Trial. Keys, passwords, cards, ID numbers and personal details in text stay free, with no account.
• Testing Guardpup? Sign in, then enter your tester code on your account page.
• Report a Problem opens a short form on guardpup.io, with your version filled in, instead of your mail app.

Build fingerprint 694f52ea99e72619be90ad6fd8af2a00e3f951df5d3068f97c72de4e3e1e5b38

0.9.11 · October 2026

• Fixes and small improvements.

Build fingerprint f6816119855656ed54d5fb7739c5b663518523e3cf75c61d78a371970b8e3e5f

0.9.10 · October 2026

• Fixes and small improvements.

Build fingerprint f69713fb1e18312821eaa7af526d77036f64674aac3e57be7b4e35fed675546c

0.9.9 · October 2026

• New in this menu: “Check my AI history”. See which keys and passwords you already sent ChatGPT or Claude, with where to replace each one. Signed in here? “Check now” reads your chats from the site (from ChatGPT it’s new and being tested). Or drop your export. It’s all checked on this computer.

Build fingerprint ad786988288673016c0f9fd748b874a6fc40f83eb674838b764a9752659a4583

0.9.8 · October 2026

• Names, emails, phone numbers and addresses are now checked on the free plan too, not only with Pro.
• In a company team, your company can turn on a weekly team report: totals with no names and no content. If it’s on, the settings page says so and shows the exact report.

Build fingerprint 8e453a3a906b5a1a4d781d67086e6db4ec963d8c5d973d4eab8f1d26e9ac06e9

0.9.7 · October 2026

• New in the menu: “Connections Guardpup made”. Every time Guardpup connected to guardpup.io from this browser, why, and whether it worked.
• Check that your copy is the one published: each version’s build fingerprint is on this page.
• In a company team, your company can now switch off anonymous usage counts and real values on copy for everyone.

Build fingerprint 55285f8612a4d09d4f4f52dffe2731bbe73c1db8adb0646cd5df8bfbb7804aa2

0.9.6 · October 2026

• Copy an AI’s answer and your real values come back in place of the stand-ins, ready for your code. A note says so, with Undo. Pasting into an AI chat is checked again.
• The question before masking now says it plainly: what’s yours, and what the AI gets.
• Catches Clerk, Cloudflare, Resend and PostHog keys, and no longer flags IDs that only look like keys.

Build fingerprint 3ab9502a98d906e285d532011783765a36dbfb059e4dfeac6cc9cef8386892e4

0.9.5 · October 2026

• New, and off unless you turn it on: “Share anonymous usage counts”, weekly totals that help improve Guardpup. Never what you type; “See what’s sent” shows the exact report.
• On forms in screenshots, finds an account number printed under its label, and no longer covers an order number as if it were a phone number.

Build fingerprint 52911e96aaacdd09303000bb6008fd9bc204074bac7f9712334038ced0a39aea

0.9.3 · October 2026

• Mistral, DeepSeek, Poe, HuggingChat and Qwen are one switch away: “Also protect on other AI sites” in the menu.
• A PDF over 300 pages asks first: check every page, or attach it without checking.
• Catches passwords written in passing (“password Harbor77!x”) and bank details: IBANs, and account numbers where the text says so.
• Reads forms and tables in screenshots, like a W-2, and covers only what’s sensitive, not the box beside it.
• Says “personal information” rather than “a secret” when that’s what it found.

Build fingerprint 5b3acccfecd60c377a11a175140437294145096837df35d193226626391808c9

0.9.2 · 21 October 2026

• When Rocky masks something, you see it swap: the real value fades out and a stand-in takes its place.
• Catches a key with no known prefix when your message says it’s one (“my API key: …”).
• The menu shows what Rocky caught this week first; pausing is at the bottom.

Build fingerprint 0fe517dd17c0fe8b9605b5c0d3195a41cf60b33c8bdb25eeb958b612dff97b3c

0.9.1 · 20 October 2026

Guardpup's first public version.

• Checks what you paste, type, attach or drop in 15 AI chats, before it's sent.
• Masks secrets with realistic stand-ins so the AI still helps; "Show my real values" swaps them back on your screen.
• Reads screenshots and documents (PDF, Word, Excel, PowerPoint) on your computer.
• Your own list of things to protect, stored only as fingerprints.
• Company rules and lists for teams, set up from Google Workspace, Intune or Jamf.
• English and Korean.

Build fingerprint 9902fe08ac690a2d6f6d19aece8f4ee4a4d85725fa561c93d7324a320729b01a

Check Your Copy

Browser extensions update themselves, and some popular ones have been changed by an update to collect people's AI chats. So every version of Guardpup has a build fingerprint, listed above: a SHA-256 over each of its files. The copy your browser installed from the store gives the same fingerprint as the package we published. If an update ever changed anything, the fingerprint wouldn't match.

To check, with Guardpup's developer tool: guardpup verify. It finds Guardpup in Chrome, Edge, Brave and other Chromium browsers on your computer, works out each copy's fingerprint there, and says whether it matches. Nothing is sent anywhere. guardpup verify --list shows every file with its own SHA-256.

How the fingerprint is worked out: the SHA-256 of a list of <sha256> <path> lines, one per file, sorted by path. The store changes four things in every extension it serves: it adds key and update_url to manifest.json, re-formats JSON files, re-encodes the toolbar icons, and adds its own signatures in _metadata/. So JSON files are compared by their content, and the icons and _metadata/ are left out. The code itself is compared byte for byte.