MailHush 2.0 is a big update.

• Masks 11 kinds of personal data: email addresses, phone numbers, card numbers (Luhn-checked), IBANs (mod-97 checked), API keys and tokens (AWS, GitHub, Stripe, Slack, OpenAI, Anthropic, Google, JWTs, private keys), US Social Security numbers, PESEL, IPv4, IPv6, MAC addresses and crypto wallets.
• Three mask styles: labels like [email], dots that keep the layout, or partial masking that keeps just enough to recognise a value. Set one style for everything or per detector.
• Custom rules: hide any text or regex, with your own replacement and $1 capture groups.
• Rename any detector's label.
• Skip a site and its subdomains in one click from the popup.
• Alt+Shift+M pauses or resumes masking everywhere.
• Fields show the real value while you type, and forms submit what you typed, never the mask.
• Also masks tooltips, placeholders, alt text, aria-labels, the tab title, open shadow DOM, frames and content pages add later.
• Export and import all settings as JSON.
• New tabbed settings page.

MailHush still makes no network requests and collects no data.

MailHush now protects pages earlier during load by running at document start and briefly hiding the page until the initial email masking pass completes.

default privacy behavior was also tightened: MailHush is enabled by default, masks all detected email addresses by default, and blur-masks email input fields by default.