Paste the exact text you plan to share
Use the final artifact, because secrets can reappear after another log export, configuration merge, or copied request header.
Secret scanner for finding and redacting credentials
Check code, logs, configuration, and HTTP transcripts for common credential shapes before sharing. Detection and redaction run in this browser, and no input is uploaded.
Scan and redact likely secrets locally
Add the exact code, log, configuration, or transcript you plan to share.
No scan has run yet.
Redacted preview
Review every line. A clean pattern scan cannot prove that text is safe.
How to use the secret scanner
The secret scanner keeps its input on this device. Review the result using the steps below before sharing or relying on it.
Review every finding by type
The scanner reports categories and counts without repeating detected values in its summary. Open the redacted preview to verify that technical context remains useful.
Apply redactions and inspect again
Replace likely credentials with explicit labels, then manually check personal data, internal identifiers, signed URLs, and application-specific secret formats that pattern matching may miss.
What the secret scanner does not do
Pattern matching produces both false positives and false negatives. It cannot prove that text is safe, determine whether a token is live, inspect external files, or replace a repository scanner, data-loss prevention system, or human review.
Before sharing the result, read Secret scanning before sharing for the matching context and privacy checks.
Secret scanner questions
Privacy, limits, and correct interpretation.
Does the secret scanner upload text?+
No. Detection, categorization, preview, and replacement run locally in this browser.
Which secrets can it find?+
It checks common private-key blocks, AWS keys, GitHub and Slack tokens, JWTs, bearer headers, database credential URLs, and common assigned credential names.
Does a clean result mean the text is safe?+
No. Custom token formats, personal data, business identifiers, and transformed secrets may not match. Review the complete text yourself.
Does redaction revoke an exposed token?+
No. If a real credential was exposed anywhere, revoke or rotate it in the system that issued it.
Related browser tools
After using the secret scanner, choose another tool only if the next task changes to formatting, comparison, encoding, or measurement.
Format and validate JSON in your browser
Pretty-print compact JSON, minify a valid document, or locate a syntax error without uploading the input. The formatter runs entirely in this browser.
Open tool →Online text diff for line-by-line comparison
Compare an original and changed block line by line without sending either version to the server. Use the result for a quick inspection, not as a replacement for version-control history.
Open tool →Encode and decode Base64 text locally
Convert UTF-8 text to Base64 or decode a Base64 value locally. Base64 is a transport representation, not a confidentiality or access-control mechanism.
Open tool →Online word, character, line and byte counter
Measure visible writing and actual UTF-8 storage size as you type. Counts update locally and help you check a text block before creating a paste.
Open tool →Online URL encoder and decoder
Percent-encode a URL component or decode an encoded value without uploading it. Use this tool for query values, paths, callback parameters, and sanitized HTTP examples.
Open tool →Free local JWT decoder for headers and claims
Inspect the Base64URL-encoded header and payload of a three-part JSON Web Token in this browser. The decoder never verifies the signature and never proves that a token is authentic or safe to trust.
Open tool →Unix timestamp converter for logs and APIs
Convert Unix seconds, Unix milliseconds, or an ISO 8601 date into UTC, local time, seconds, and milliseconds. Processing stays in the browser for safer log analysis.
Open tool →Generate a SHA-256 hash of any text
Create a lowercase SHA-256 digest from the exact UTF-8 bytes of a text block. Hashing runs through the browser Web Crypto API and does not upload the input.
Open tool →Local text cleaner for lines and whitespace
Prepare a text list or copied diagnostic block locally by trimming trailing spaces, compacting blank lines, removing duplicate lines, or sorting lines. Every action changes text, so review the result before replacing a source artifact.
Open tool →