diff --git a/CHANGELOG.md b/CHANGELOG.md
index bb438d3f..50c83dba 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,5 @@
 # Changelog #
-This package follows standard semvar, `<major>.<minor>.<build>`. No breaking changes will be introduced to existing `<minor>` versions.
+This package follows standard semver, `<major>.<minor>.<build>`. No breaking changes will be introduced to existing `<minor>` versions.
 
 ## 2.2
 * The `table` view is now the default as the `tree` view becomes deprecated. To display the `tree` view, use the `tree` attribute on the openapi-explorer html element.
@@ -16,6 +16,7 @@ This package follows standard semvar, `<major>.<minor>.<build>`. No breaking cha
 * Replace `replaceState` with `pushState` so forwards and backwards navigation actually work.
 * Add id and name for autocomplete options.
 * Improve error on Access-Control-Allow-Private-Network.
+* Add `ph-no-capture` to all sensitive locations.
 
 ## 2.1
 * Add `x-locale` vendor extension to specify the locale of the spec.
diff --git a/src/components/syntax-highlighter.js b/src/components/syntax-highlighter.js
index c6018289..633392fd 100644
--- a/src/components/syntax-highlighter.js
+++ b/src/components/syntax-highlighter.js
@@ -124,7 +124,7 @@ class SyntaxHighlighter extends LitElement {
    * @returns Content
    */
   renderCopyWrapper(content) {
-    return html`<div class="fs-exclude" data-hj-suppress data-sl="mask" style="min-height: 2rem;">
+    return html`<div class="fs-exclude ph-no-capture" data-hj-suppress data-sl="mask" style="min-height: 2rem;">
       <button 
         class="m-btn outline-primary toolbar-copy-btn" 
         @click='${this.copyToClipboard}' 
diff --git a/src/templates/security-scheme-template.js b/src/templates/security-scheme-template.js
index 758f9e3a..560f915e 100644
--- a/src/templates/security-scheme-template.js
+++ b/src/templates/security-scheme-template.js
@@ -344,7 +344,7 @@ function renderSecurityScheme(v) {
           </div>`
           : !v.finalKeyValue ? html`
               <input autocomplete="on" name="api-key" type="text" value="${v.value}" placeholder="${v.bearerFormat ?? 'api-token'}"
-                spellcheck="false" class="api-key-input fs-exclude" data-hj-suppress data-sl="mask">
+                spellcheck="false" class="api-key-input fs-exclude ph-no-capture" data-hj-suppress data-sl="mask">
               <button type="submit" class="m-btn thin-border" style = "margin-left:5px;"
                 part = "btn btn-outline"
                 @click="${(e) => { onApiKeyChange.call(this, v.apiKeyId, e); }}"> 
@@ -376,7 +376,7 @@ function renderSecurityScheme(v) {
       <div style="height: 50px; margin-top: 1rem; padding: 10px 0; margin-bottom: 10px;">
         <form style="display:flex;">
           <input autocomplete="on" name="api-key-user" type="text" value = "${v.user}" placeholder="${getI18nText('authentication.username')}" spellcheck="false" class="api-key-user" style="width:100px">
-          <input autocomplete="on" name="api-key-password" class="api-key-password fs-exclude" data-hj-suppress data-sl="mask"
+          <input autocomplete="on" name="api-key-password" class="api-key-password fs-exclude ph-no-capture" data-hj-suppress data-sl="mask"
             type="password" value = "${v.password}" placeholder="${getI18nText('authentication.password')}" spellcheck="false" style = "width:100px; margin:0 5px;">
           <button type="submit" class="m-btn thin-border"
             @click="${(e) => { onApiKeyChange.call(this, v.apiKeyId, e); }}"