Chrome Extension¶
The Xybern Redact Chrome extension brings PII anonymization directly into your browser. Anonymize any selected text with a right-click, and get an automatic warning when you paste sensitive data into any input field, before it reaches an AI model.
Right-click to anonymize, select any text on any page, right-click, and get the anonymized version instantly.
Clipboard PII scanner, detects names, emails, phones, SSNs, and API keys in pasted text before submission.
Zero storage, text is processed server-side and immediately discarded. Nothing is stored beyond your Provenance Vault log.
Full audit trail, every anonymization is logged to your workspace Vault with entity counts and leakage detection.
Install¶
Setup¶
1. Get your API key
Go to your Redact workspace, click the API Keys tab, and create a key scoped for your domain.
2. Configure the extension
Click the Xybern Redact icon in your Chrome toolbar, paste your API key, and click Save & verify. The endpoint defaults to https://xybern.com, leave it unless you are self-hosting.
3. Start anonymizing
Select any text on any webpage, right-click, and choose "Anonymize with Xybern Redact".
Features¶
Right-click anonymization¶
Select any text on any webpage, a news article, a document, a form, right-click and choose "Anonymize with Xybern Redact". A card appears with the anonymized version. Copy it to clipboard with one click.
What gets stripped depends on your workspace policy:
| Entity type | Example | Anonymized |
|---|---|---|
| Person name | Elon Reeve Musk | Morgan Campbell |
| Email address | john@company.com | finley@corp-anon.org |
| Phone number | +44 7700 900123 | +44 7700 900456 |
| SSN | 123-45-6789 | [REDACTED] |
| Dates | June 28, 1971 | July 28, 1971 (shifted) |
| Organisation | Goldman Sachs | Cobalt Group |
The same entity always gets the same pseudonym within your workspace, keeping responses coherent across conversations.
Clipboard PII scanner¶
When you paste text into any input field, a chat window, a document editor, an AI assistant, the extension scans the clipboard locally for PII patterns:
- Email addresses
- Phone numbers
- Social Security Numbers (SSNs)
- Credit card numbers
- API keys (
sk-...,xai-..., AWS access keys)
If PII is detected, a yellow warning banner appears at the top of the page with two options:
- Anonymize & paste, calls the API, strips the PII, pastes the clean version
- Paste anyway, proceeds with the original text, no API call
The local scan runs entirely in-browser with no network request. Only "Anonymize & paste" contacts your Xybern Redact workspace.
Privacy & security¶
- The extension only transmits text when you explicitly click "Anonymize" or "Anonymize & paste"
- Clipboard scanning runs locally, no data leaves your browser for detection alone
- All anonymization requests are logged to your Provenance Vault with a cryptographic chain hash
- API keys are stored in
chrome.storage.sync, encrypted by Chrome and synced only to your signed-in Google account - The extension requests the minimum permissions required:
contextMenus,storage,clipboardRead,activeTab
Provenance Vault integration¶
Every anonymization request from the extension appears in your workspace Vault with:
model_used: browser-extension- Original document hash (SHA-256)
- Anonymized document hash
- Entity count and types
- Leakage detection result
- Merkle chain hash for tamper-evidence
This gives you a complete audit trail of what PII was stripped, when, and by which API key, even for ad-hoc browser requests.
Permissions explained¶
| Permission | Why it's needed |
|---|---|
contextMenus |
Add "Anonymize with Xybern Redact" to the right-click menu |
storage |
Store your API key and endpoint URL locally |
clipboardRead |
Read clipboard text during paste events to detect PII |
activeTab |
Inject the result overlay into the active tab |
https://xybern.com/* |
Send anonymization requests to your Redact workspace |
Requirements¶
- Google Chrome 114 or later (Manifest V3)
- A Xybern Redact workspace with at least one active API key
- No additional software or browser configuration required