DOMCloak sits inside your browser's DOM, detecting and masking sensitive data in real-time — SSNs, credit cards, API keys, JWTs, IBANs, and more. Invisible to shoulder surfers. Zero telemetry.
Core masking free forever · PRO from $9.99/month
Click through each step to see exactly what DOMCloak does inside your browser.
Click the DOMCloak icon on any page. The popup opens and immediately begins scanning the live DOM.
DOMCloak walks every text node and finds sensitive matches — grouped by type and category.
Flip switches to mask individual data types. Changes apply instantly — no reload, no lag.
Need to see a value? Click any masked item. It reveals for 3 seconds, then re-cloaks automatically.
User Management — Admin Panel
| Name | Phone | SSN | Salary | |
|---|---|---|---|---|
| Alice Chen | alice@corp.com | (415) 555-0192 | 123-45-6789 | $185,000 |
| Bob Torres | bob@corp.com | (212) 555-0341 | 987-65-4321 | $142,000 |
| Carol Kim | carol@corp.com | (310) 555-0847 | 456-78-9012 | $210,000 |
User Management — Admin Panel
| Name | Phone | SSN | Salary | |
|---|---|---|---|---|
| Alice Chen | a***@c****.com | (***) ***-**** | ***-**-**** | $xxx,xxx |
| Bob Torres | b**@c****.com | (***) ***-**** | ***-**-**** | $xxx,xxx |
| Carol Kim | c****@c****.com | (***) ***-**** | ***-**-**** | $xxx,xxx |
↑ DOMCloak masked 18 values across 5 columns — layout unchanged
User Management — Admin Panel
↓ Click any masked value to reveal for 3 seconds
| Name | SSN | Salary | |
|---|---|---|---|
| Alice Chen | alice@corp.com | ***-**-**** | $xxx,xxx |
| Bob Torres | b**@c****.com | ***-**-**** | $xxx,xxx |
From one-click detection to enterprise-grade masking modes — all running locally inside your browser.
Scans every text node in the live DOM and identifies 13 sensitive data types across PII, Financial, Auth, Network, and Cloud categories.
Masks values in place while keeping the original structure — email domain hints, card last-4, country codes — so you always know what type of data it is.
Visually blurs matched text with CSS filter instead of character replacement. The data is there — just unreadable over someone's shoulder.
Swaps real values with convincing fake data — realistic names, addresses, card numbers. Perfect for demos, screenshots, and onboarding walkthroughs.
Click any masked value to see the original for 3 seconds. It re-cloaks automatically with a green outline countdown. Intentional and auditable.
Blurs pre-filled sensitive inputs on page load — emails, phones, API keys. Fields reveal on focus so you can still interact, just not expose.
Define your own patterns — internal IDs, ticket numbers, proprietary codes. Built-in regex validator catches errors before they hit the page.
Tell DOMCloak to activate automatically on specific domains. Your Salesforce, Jira, internal dashboards — always cloaked on load, no clicks required.
Export your full settings as a JSON file and share with your team. Import once — same patterns, same rules, same protection across every machine.
MutationObserver watches for dynamically loaded content. New rows in your table, lazy-loaded cards — all automatically scanned and masked as they appear.
Full CSS variable theming — dark default with a persistent light mode toggle. Matches any enterprise design system without fighting for contrast.
Traverses open shadow roots so web components and modern SPA frameworks don't hide data from DOMCloak's scanner.
From basic PII to cloud credentials and financial instruments — comprehensive coverage for enterprise data environments.
Core masking is free forever. Upgrade to PRO for the full enterprise feature set.
Install DOMCloak in 30 seconds and your browser's DOM is private — for good.
Add to Chrome — It's Free