For crypto
Did you paste the right address?
Address poisoning puts a look-alike in your history: an address that starts and ends like one you use. Noteproof keeps your addresses locked and checks what you paste or type against them, on the sites you choose.
How it checks
Three steps to a safer paste.
Save it in Locked
Paste an address, a bank account, an exchange user ID or a payment handle once. Noteproof checks it, and asks first if it looks like one you already saved.
Turn the guard on for a site
Your exchange's withdrawal page, or your bank's payment page. Chrome asks you first, one site at a time.
Paste as usual
What you paste is compared with what you saved, and checked again when you press send.
Try it here
Paste a look-alike and see what happens.
This runs the paste guard's own check, right in this page. The saved items are public test values, and nothing is sent anywhere.
Saved in Locked
Public test values, nobody's. Never send anything to them.
What it checks
More than the first and last characters.
Look-alikes
Same start and end as a saved address, a different middle: red. The paste is stopped, and nothing goes in the field.
The network
Each address keeps the network you saved it for. If the page's network menu has another one picked, it tells you.
Memos and tags
XRP, Stellar, TON and Cosmos addresses keep their memo or tag. Without the saved one beside it, a paste is never green.
Checksums
Where an address carries a checksum, a broken one is red: a character in it is wrong.
Exchange user IDs
Binance, OKX, Bybit and others let you send to a user ID. A saved one is green only on its own exchange's site.
Where the page can't hide it
The warning shows on the page, and again in the side panel, which the page can't touch.
Locked: details that can't change by accident
The details you send money to, read-only and copy-only, in one place.
- Crypto addresses with their network and memo or tag: Bitcoin, Ethereum and Ethereum-style networks, Solana, Tron, XRP, Stellar, TON, Cosmos and more.
- Bank accounts: IBANs with their BIC, and US, UK, Canadian and Australian account numbers with their bank's number.
- Exchange user IDs and payment handles (PayPal, Venmo, Cash App, Revolut, Wise, Zelle).
- ID numbers such as an SSN or a passport number, masked until you press Show.
- Encrypted with a password only you know. Locked locks itself after 15 minutes without use.
And notes for every site
Keep what each exchange needs beside it.
Which network it uses, the steps for a withdrawal, what to check before you send. Write it once, and the note comes back when you return to the site.
See the notes
Private by design
Your notes and your money details stay yours.
- Everything stays on your computer.
- No account, no servers, no ads, no analytics. Noteproof makes no network requests.
- Locked is encrypted.
- With a password only you know. Nobody, us included, can reset or recover it.
- It reads a site only when you say so.
- The paste guard works only on the sites you turn it on for, and Chrome asks you too.
- Recovery phrases and private keys are refused.
- In Locked, and when pasted into a note. One typed into a note by hand is flagged until you delete it.
- Readable code.
- Nothing in it is minified. Read the privacy policy.
A check, not a guarantee
A hostile page can still do things a browser extension can't see, and Noteproof can't see wallet popups or apps on your phone. Always confirm changed payment details with the person, on a phone number you already had.
Questions
Good to know.
Is Noteproof free?
Yes. It's free to install and use.
Does Noteproof send my notes or addresses anywhere?
No. It has no account and no servers, and it makes no network requests. Everything stays in Chrome on your computer.
Which sites does the paste guard check?
Only the ones you turn it on for, such as your exchange's withdrawal page or your bank's payment page. Chrome asks you first, one site at a time. Notes work on every site without it.
Which networks and accounts does it know?
Crypto: Bitcoin, Ethereum, BNB Smart Chain, Polygon, Arbitrum One, Base, Optimism, Avalanche C-Chain, Tron, Solana, XRP, Stellar, TON and Cosmos Hub. Banks: IBANs with their BIC, and US, UK, Canadian and Australian account numbers with their bank's number. Also user IDs on Binance, OKX, Bybit, KuCoin, Bitget, Gate, MEXC and Coinbase, and PayPal, Venmo, Cash App, Revolut, Wise and Zelle.
Does it work in wallet popups or phone apps?
No. A browser extension can't see inside another extension's popup, such as a wallet's, or apps on your phone. It checks what you paste on the websites you turn it on for.
What if I forget my Locked password?
Nobody can reset or recover it, us included. Keep it somewhere safe.
Why won't it save my recovery phrase?
A recovery phrase or a private key gives full control of a wallet, and it shouldn't sit in a browser extension. Noteproof refuses them in Locked and when pasted into a note; one typed into a note by hand is flagged until you delete it.
Do my notes sync between computers?
No: everything stays in Chrome on this computer. Locked has Back up and Restore, and ⌘K (Ctrl+K) exports your notes as Markdown.