Secret Scanner

Find leaked credentials in text or a file — API keys, tokens, passwords, private keys — and copy a redacted copy.

WebRuns in your browser

About this tool

Paste text or open a file to find API keys, tokens, passwords in URLs and values assigned to names such as password or secret. Each finding shows its kind, its line and a masked value, never the whole secret.

You can also copy the text with every finding removed. The scan can miss custom secrets and can flag harmless values. It runs in a background worker here, at most 1 MB is read, and nothing leaves your browser.