← Back to projects

Ephor

A clipboard security agent for macOS that warns before sensitive data is pasted into browsers.

2025

Overview

Description

Ephor is a Python security utility that monitors global paste events, matches clipboard contents against secret-detection rules, and alerts the user before credentials are pasted into a browser.

Problem solved

Secrets can be pasted into the wrong destination surprisingly easily, especially while switching between terminals, browser tabs, and password managers.

Role and contributions

Implemented the local agent flow, rule loading, and notification experience for a lightweight security guardrail.

  • Wired global paste detection into a background monitoring loop
  • Added regex-driven secret matching and browser-aware warnings
  • Documented packaging, permissions, and local runtime requirements