Cloakshot blacks out emails, phone numbers, card numbers, national IDs, API keys and IP addresses before the screenshot is taken. One click, nothing to upload, nothing to remember.
Works in Chrome, Edge and Brave. No account. No data leaves your browser.
Support agents, developers, finance and HR teams, lawyers, recruiters: anyone who pastes screenshots into tickets, chats, docs and bug reports, and can't afford to leak a customer's data.
Pattern matching with real validation: Luhn for cards, check digits for CPF/CNPJ, mod‑97 for IBAN, known token shapes for API keys and JWTs, plus password= style secrets in logs.
Cloakshot covers the text on the page itself, then takes the shot. The raw pixels never exist, so there is nothing to recover from the image, ever.
No accounts, no uploads, no analytics, no cloud OCR. Detection, capture and editing run on your device. The only network request is optional license activation.
Three ways in, one clean image out.

Capture the visible area with auto-redaction, capture the full page, or pick what to detect.

Manual mode lets you black out any element or word by clicking it. Click a box to undo.

Drag to black out, blur or pixelate anything else. Copy to clipboard or save a PNG.
Free for occasional use. Pro is a one-time payment: no subscription, lifetime updates for v1.
Payments, invoices and taxes are handled by our payment provider (merchant of record). Prices in USD; local taxes may apply at checkout. Your license key arrives by email within a minute. Brazilian companies: write to us for an invoice in BRL with nota fiscal.
Most redaction tools blur pixels after the fact. Blur can be reversed, boxes get forgotten, and the unredacted original still sits in your clipboard history or Downloads folder. Cloakshot covers the text on the page first, so the sensitive pixels are never rendered into an image at all. Solid black, by default, because solid black is the only mask that cannot be undone.
On any normal web page, including web apps like CRMs, help desks, admin panels and dashboards. Browser-internal pages (chrome://…) and the Chrome Web Store are protected by Chrome itself and can't be captured by any extension. Text inside images or cross-origin iframes isn't scanned automatically; use manual mode for those.
Email addresses, phone numbers (international formats), credit and debit card numbers (validated with Luhn and issuer prefixes), Brazilian CPF and CNPJ (with check digits), US Social Security numbers, IBANs (mod‑97), API keys and tokens from AWS, Stripe, OpenAI, Anthropic, GitHub, GitLab, Slack, Google, SendGrid and npm, JWTs, bearer tokens, private key blocks, password=/token= style values, IPv4 and IPv6 addresses, and optionally money amounts. Pro adds your own keywords (names, company names) and regular expressions. Names and street addresses are not detected automatically in this version.
No. Page content, screenshots and detections are processed locally and never uploaded. There are no analytics. The only network request the extension ever makes is license activation and periodic validation with the payment provider, if you use a Pro key; that request contains the key and a label like "Chrome on Windows".
Yes. The box is drawn over the page before the pixels are captured, so the image never contained the text. Blur and pixelation in the editor are applied to the captured image and are meant for aesthetics, not security; for anything sensitive, use black.
Edge and Brave install from the Chrome Web Store today. A Firefox version is planned.
14 days, no questions asked. Reply to your receipt email.