What’s new since 0.8.20:

Hides sensitive data in bank and card statements and other documents: the account holder and transaction counterparties are masked, while amounts, dates and the bank name stay readable.
Detects personal names in context (labels, signatures, statement lines).
Warns when a message or document contains hidden or disguised instructions aimed at the AI.
Fewer false alarms on placeholder/example secrets (e.g. “your-api-key-here”).
Reliability: “Show real values” fixed when a value repeats, an mm:ss countdown, better support for the latest ChatGPT UI, and a fix that stopped a masked passport surname from leaking.

Fixes in 0.8.20:
- Pasting a config / secrets JSON now masks the secret values and sends normally. Previously a key name could be flagged instead of its value, which could both leave a real secret unmasked and leave the block panel stuck so nothing could be sent.
- A labelled IP address (for example "IP Address: 203.0.113.45", in every supported language) is now hidden as an online identifier. A bare IP with no label stays a caution.
- The Excel (.xlsx) mask now fails closed: if a must-hide value cannot be placed in the sanitized workbook, the block stays up instead of attaching a file that still carries it.

No new permissions. No change to the console or to what data the extension sends.

Fixes the override "Why do you need to send this?" box so you can type your reason. On some sites it could not be typed into (the text went to the chat box instead).

Fixes a detection edge case: a deliberately crafted value could skip a check. Normal use is unchanged; your data stays protected as before.

Fixes and improvements:

• Hiding a credential inside a connection string (for example a database URL) no longer blocks your message. Once hidden, it sends normally.
• The console now receives only the type of a secret or a card / bank number, never a part of the value.
• Published updates apply more promptly in the background.
• Internal cleanup of a packaged file.

Reads text in pictures in every language (language files are downloaded when needed and checked against a fixed fingerprint) and checks every attached file, including scanned PDFs, with progress next to the chat box. Finds more personal data, names, AI service keys and passwords; can black out faces, QR codes, signatures and stamps. Requests to your console are signed by your browser. No longer asks for the tabs permission. Never sends a message for you.

Firefox: technical data (the report that tells your organization when Nesgate is removed from the browser) is now optional and asked at installation. Identity documents of every country are recognised on paid plans, more reliable image black-out, and security fixes.