Help

Chrome, tested on Mac. Edge, Brave and Arc run on Chrome's engine and should work, on Mac, Windows and Linux; we're testing them.

Click the puzzle piece 🧩 at the top right of the browser, then the pin next to Guardpup. Rocky stays in the toolbar from then on.

ChatGPT, Claude and Gemini. Others are being tested: the supported sites page has the full list. AI built into other apps (Notion, Google Docs, Slack, Copilot in Office) isn't covered yet. Tell us which you'd like next.

The browser extension covers websites. For desktop AI apps on Mac (ChatGPT, Claude and Gemini; others are being tested) there's the Guardpup Mac app, free to start. It checks what you paste into them (free: keys, passwords, cards, ID numbers and personal details; Pro adds screenshots, images, text files, PDFs and Word documents you drop, and a check of what you type). It doesn't see files you add with the app's own attach button. On Windows, the Windows app is being tested.

• API keys, tokens and private keys (OpenAI, Anthropic, AWS, Google, GitHub, Stripe, Slack and many more)
• Passwords, including written in a sentence ("my password is …") and in config files
• Card numbers and national ID numbers: US Social Security, UK National Insurance, Korean 주민등록번호, Canadian SIN, Indian Aadhaar, Spanish DNI/NIE, Japanese My Number
• Emails, phone numbers, names and postal addresses (you can switch these off)
• Pro: anything you add yourself: a password, a passport or account number, a client's or project's name

Free checks text you paste or type. Pro also checks files you attach (text, PDF, Word, Excel, PowerPoint) and screenshots.

Names mentioned in passing (Guardpup catches names in "Name:" fields, "my name is" and email sign-offs, and you can add specific ones yourself), addresses outside US, UK and Korean formats, voice conversations, and a secret split across several messages. It reduces the chance of a leak; it can't promise to catch everything.

It swaps each secret for a realistic stand-in of the same kind before the message is sent. The AI can still help (it sees a key-shaped key, an email-shaped email) but never the real value. The stand-ins stay highlighted in the chat so you know what the AI received.

Click Show My Real Values in the pill at the bottom right of the chat. It swaps the stand-ins back on your screen only. When you copy from the chat (code the AI wrote, say), your real keys and passwords come back in place of the stand-ins, with an Undo; turn that off in Rocky's menu. The link between stand-ins and real values lives in that tab's memory and disappears when you close it.

Choose Send Anyway for this time, or Never Mask This so it's not mentioned again. If it keeps happening with a kind of text, email us an example with the sensitive part changed; false alarms are bugs and we fix them.

Yes, with Pro: Rocky's menu → Mask automatically. Secrets are swapped for stand-ins as you paste, with no dialog.

Rocky's menu → Pause for 1 Hour (turns itself back on) or Turn Off. While it's off, the icon shows a grey OFF badge.

Guardpup is on this site but can't find the message box or send button, usually because the site just changed its design. Open Rocky's menu to see what's wrong, and please tell us: we fix it as fast as we can.

No. What you type, paste or attach never leaves your computer. Guardpup itself connects only to guardpup.io: with Pro, to check your subscription, and once a week if you choose to share anonymous usage counts. With Team, your company can also turn on a weekly team report: totals with no names and no content. Otherwise it never connects at all. (The Mac and Windows apps and the developer tool also ask once a day for the newest version number, and send nothing with it.)

Check my AI history: when you ask, Guardpup reads your past chats from ChatGPT or Claude, right in your browser, the same way the site shows them to you. Nothing goes to Guardpup, and the report stays on your computer.

Details: privacy.

No. Companies set rules; they never see messages. With Team, your company can turn on a weekly team report: totals with no names and no content. If it's on, Guardpup says so and shows you the exact report.

Start a team trial on your account page; see Teams.

Free to start, no account. Pro and Team prices: see pricing.

Cancel any time from Manage subscription on your account page (or the link in your receipt); your plan runs to the end of the period you paid for. When it ends, Pro features and company rules switch off and the free protection keeps working. Full refund within 30 days of your first payment or a yearly renewal, no questions: refund policy.

Only for Pro and Team: sign in on guardpup.io/account with Google or an emailed code. See Account and Plans.

Each app signs in once: Account and Plans shows how for each.

The extension and the Mac app start with a week of Pro, no account: that's the free trial. For the developer tool, sign in, then Try Pro Free. Teams get 14 days. See Account and Plans.

On your account page, Delete My Account; cancel a paid plan first. See Account and Plans.

The extension: right-click Rocky → Remove from Chrome. Everything it stored is deleted with it. The Mac app: Uninstall Guardpup… in its menu. The developer tool: guardpup uninstall. All the steps, including what to do if you already removed an app another way. If your company installed it, only your company can remove it.