Paste the exact text you plan to share
Use the final artifact, because secrets can reappear after another log export, configuration merge, or copied request header.
Free local secret scanner and redaction tool
Check code, logs, configuration, and HTTP transcripts for common credential shapes before sharing. Detection and redaction run in this browser, and no input is uploaded.
Scan and redact likely secrets locally
Add the exact code, log, configuration, or transcript you plan to share.
No scan has run yet.
Redacted preview
Review every line. A clean pattern scan cannot prove that text is safe.
How to use free local secret scanner and redaction tool accurately
This secrets tool keeps input local, but its result still needs the human review described in the steps below before it is shared or used.
Review every finding by type
The scanner reports categories and counts without repeating detected values in its summary. Open the redacted preview to verify that technical context remains useful.
Apply redactions and inspect again
Replace likely credentials with explicit labels, then manually check personal data, internal identifiers, signed URLs, and application-specific secret formats that pattern matching may miss.
What this secrets tool does not do
Pattern matching produces both false positives and false negatives. It cannot prove that text is safe, determine whether a token is live, inspect external files, or replace a repository scanner, data-loss prevention system, or human review.
Before sharing the secrets result, read Secret scanning before sharing for the matching context and privacy checks.
Free local secret scanner and redaction tool questions
Privacy, limits, and correct interpretation.
Does the secret scanner upload text?+
No. Detection, categorization, preview, and replacement run locally in this browser.
Which secrets can it find?+
It checks common private-key blocks, AWS keys, GitHub and Slack tokens, JWTs, bearer headers, database credential URLs, and common assigned credential names.
Does a clean result mean the text is safe?+
No. Custom token formats, personal data, business identifiers, and transformed secrets may not match. Review the complete text yourself.
Does redaction revoke an exposed token?+
No. If a real credential was exposed anywhere, revoke or rotate it in the system that issued it.
Other local tools after secrets
Choose another browser tool only when the next task changes from free local secret scanner and redaction tool to formatting, comparison, encoding, or measurement.
Free online JSON formatter and validator
Pretty-print compact JSON, minify a valid document, or locate a syntax error without uploading the input. The formatter runs entirely in this browser.
Open tool →Free online text diff and comparison tool
Compare an original and changed block line by line without sending either version to the server. Use the result for a quick inspection, not as a replacement for version-control history.
Open tool →Base64 encoder and decoder for UTF-8 text
Convert UTF-8 text to Base64 or decode a Base64 value locally. Base64 is a transport representation, not a confidentiality or access-control mechanism.
Open tool →Online word, character, line, and byte counter
Measure visible writing and actual UTF-8 storage size as you type. Counts update locally and help you check a text block before creating a paste.
Open tool →Free online URL encoder and decoder
Percent-encode a URL component or decode an encoded value without uploading it. Use this tool for query values, paths, callback parameters, and sanitized HTTP examples.
Open tool →Free local JWT decoder for headers and claims
Inspect the Base64URL-encoded header and payload of a three-part JSON Web Token in this browser. The decoder never verifies the signature and never proves that a token is authentic or safe to trust.
Open tool →Unix timestamp converter for logs and APIs
Convert Unix seconds, Unix milliseconds, or an ISO 8601 date into UTC, local time, seconds, and milliseconds. Processing stays in the browser for safer log analysis.
Open tool →Free SHA-256 hash generator for text
Create a lowercase SHA-256 digest from the exact UTF-8 bytes of a text block. Hashing runs through the browser Web Crypto API and does not upload the input.
Open tool →Local text cleaner for lines and whitespace
Prepare a text list or copied diagnostic block locally by trimming trailing spaces, compacting blank lines, removing duplicate lines, or sorting lines. Every action changes text, so review the result before replacing a source artifact.
Open tool →