PixelHush automatically hides tokens, API keys and passwords in your code editor the moment screen recording or sharing starts. No more leaked secrets in tutorials, demos, or live calls.
Free plan · 7-day Pro trial · No card, no account · macOS 13+
or with Homebrew: brew install --cask pixelhush-dev/pixelhush/pixelhush
Secrets leak wherever developers work. Public commits are the only place anyone counts them.
These are commits. Nobody counts the keys that end up in screen recordings and screen shares. Read the report →
Download and run the PixelHush macOS agent — it sits quietly in your menu bar.
Add the PixelHush extension to VS Code, Cursor, Windsurf, or Antigravity — one click to install.
Add the PixelHush Chrome extension from the Chrome Web Store to protect secrets visible in your browser tabs too. After installing, turn it on from the bottom-right corner of the extension popup, or press Cmd/Ctrl+Shift+H.
Start a screen recorder or share your screen. PixelHush detects it and masks tokens, passwords and API keys in your editor and browser — no toggle to remember.
OBS, QuickTime, ⌘⇧5, Zoom and Chrome screen sharing on the free plan. Loom, Screen Studio, CleanShot X, Teams, Slack, Discord and more with Pro.











The PixelHush browser extension detects screen recording and sharing, and automatically blurs API keys, tokens and passwords on any web page — GitHub, Vercel, Supabase, AWS, or any dashboard. Works in Chrome, Edge, Brave, Arc, Opera, Vivaldi, Yandex Browser and any other Chromium-based browser.
Free with OBS, QuickTime, ⌘⇧5, Zoom and Chrome screen sharing. Other recorders with Pro. Without the Mac app, turn the blur on by hand from the extension popup.
Every download starts with 7 days of Pro. No card, no signup. Then pick a plan — or stay on Free.
/ month · will be $8
/ year · will be $79
one-time · 200 keys
No — never. PixelHush only changes how your editor displays values. Your actual files on disk stay completely untouched. The real text is still there; you can still copy and use it normally. It just appears blurred on screen while recording is active.
Your code, files and secrets never leave your Mac: detection and masking run locally, and the app talks to the editor and browser extensions over localhost. What does go out: anonymous usage signals from the Mac app (TelemetryDeck — app launches, a daily "still running" ping, which recorder triggered masking), crash reports from the Mac app (Sentry, no personal data), and a license check every hour if you have Pro. Turn usage data and crash reports off anytime with Share Anonymous Usage Data in the menu bar.
Yes. Detecting recordings and hiding secrets never needs the internet. Pro re-checks your license when you're online and keeps working offline for 7 days after the last successful check (a year for Lifetime).
The macOS menu bar agent will remind you when it detects a compatible editor is open without the extension installed. You can also manually toggle hiding from the menu bar at any time — no extension required for manual mode.
Use the manual hotkey ⌘⇧H to toggle hiding instantly. You can also request support for your app — we add new recorders regularly based on user requests. Pro users get priority for new app integrations.
You move to the free plan. Nothing is charged — we never asked for a card. Auto-hide keeps working with ⌘⇧5, QuickTime, OBS, Zoom and Chrome screen sharing. Loom, Screen Studio, CleanShot X, Teams, Slack, Discord and the other Pro apps stop triggering it, and PixelHush shows a notice when one of them starts.
PixelHush isn't notarized by Apple yet. The install command and Homebrew handle the first launch for you. If you use the DMG, run this once in Terminal: xattr -r -d com.apple.quarantine /Applications/PixelHush.app
It's Mac only (macOS 13 or later). It doesn't mask the terminal — output in Terminal, iTerm or the VS Code terminal stays visible. .py, .ts and .js files aren't masked automatically; press ⌘⇧H. It reacts to recorder apps and share windows, not to pixels: if OBS or QuickTime is open, masking is on even before you hit record, and Zoom or Chrome sharing is picked up within a few seconds.
When recording starts, PixelHush automatically protects .env (and .env.*), .yaml / .yml, .toml, .sh / .bash, and config-style .json / .jsonc files such as config.json, secrets.json or credentials.json. Python, JavaScript/TypeScript, .ini and .properties files are matched by pattern but aren't part of the automatic recording flow yet — press ⌘⇧H to mask them manually. It detects API keys, tokens, passwords and connection strings — not just file extensions.
Join developers who share code safely every day with PixelHush.