Wywh

Wywh is a privacy-first Chrome extension built to protect your conversations with ChatGPT. It automatically detects and redacts sensitive information before your prompts are sent, helping prevent accidental exposure of personal data, API keys, and confidential details—without interrupting your workflow.

Designed with on-device processing, Wywh ensures that your data never leaves your browser. Everything is analyzed locally, giving you complete control and maximum privacy at all times.

Whether you're a developer sharing code, a business professional discussing sensitive projects, or simply someone who values data security, Wywh works quietly in the background as a real-time safeguard. It scans your input as you type and replaces risky content with safe placeholders. The extension is lightweight, easy to toggle on or off, and integrates seamlessly with chatgpt.com.

What Wywh Can Redact

Wywh uses advanced pattern-matching to identify and remove a wide range of sensitive information. Below are the key categories it can detect and replace:

API Keys and Provider Tokens
Detects tokens from services like OpenAI (e.g., `sk-...`), GitHub, Slack, AWS, and more. These are replaced with `[REDACTED_API_KEY]` to prevent unauthorized access.

Bearer Tokens
Identifies authentication headers such as `Bearer sk-...` and redacts only the token portion while preserving the prefix for context.

Environment Variables
Finds assignments like `API_KEY = "secretvalue"` or `OPENAI_API_KEY: "sk-..."` and redacts sensitive values when they match known patterns or naming conventions.

Object Assignments
Within code or JSON structures, it detects sensitive fields like `apiKey: "value"` and redacts the value if it appears to contain confidential data.

Emails
Automatically detects and replaces email addresses with `[REDACTED_EMAIL]` to protect personal contact information.

Phone Numbers
Identifies phone numbers with 10 or more digits and replaces them with `[REDACTED_PHONE]`, while avoiding false positives on shorter numeric strings.

Social Security Numbers (SSNs)
Recognizes U.S. SSN formats and replaces them with `[REDACTED_SSN]`.

JSON Web Tokens (JWTs)
Detects JWTs (typically starting with `eyJ...`) and replaces them with `[REDACTED_JWT]` to prevent token exposure.

Private Keys
Finds PEM-formatted private keys and redacts the entire block with `[REDACTED_PRIVATE_KEY]`.

Payment Card Numbers
Identifies credit and debit card numbers (13–19 digits) and replaces them with `[REDACTED_CARD]` when they pass basic validation checks.

---

Wywh’s redaction system is designed to be both precise and reliable. It only removes content when patterns strongly indicate sensitive data, minimizing false positives while maximizing protection. All processing happens locally on your device—no data is ever sent externally.

For transparency, Wywh logs redactions so you can review or adjust them if needed. You can also enable **Universal Redaction** from the extension popup to ensure automatic protection across all your ChatGPT sessions.

Stay private. Stay secure. Stay in control with Wywh.