Secret Scanner
Secret Scanner
Scan pasted text for accidentally-committed secrets — AWS keys, GitHub/Slack/Stripe/Google tokens, JWTs, and PEM private keys — entirely client-side. Nothing is sent anywhere.
Entropy Detection
Additional pass (same technique as gitleaks/trufflehog): scans base64/hex-like runs for Shannon entropy and flags high-randomness tokens as a possible unknown-format secret, even if they don't match any named pattern above.
Custom Rules
Add org-specific patterns (internal token formats, ticket IDs treated as sensitive, etc.) to scan for alongside the built-in rules.
No input yet
Paste some text or load the example above to scan for secrets.
Heuristic, client-side pattern matching only — it complements but does not replace dedicated scanners like gitleaks or trufflehog in CI. Nothing you paste here is transmitted over the network.
Secret Scanner
Scan pasted text for accidentally-committed secrets — AWS keys, GitHub/Slack/Stripe/Google tokens, JWTs, and PEM private keys — entirely client-side. Nothing is sent anywhere.
Common uses
- Scan a log file for leaked API keys
- Check a config file for hardcoded secrets before committing
- Redact all secrets found in pasted text
Frequently asked questions
Can I use Secret Scanner to scan a log file for leaked API keys?
Yes. Secret Scanner can scan a log file for leaked API keys, directly in your browser.
Can I use Secret Scanner to check a config file for hardcoded secrets before committing?
Yes. Secret Scanner can check a config file for hardcoded secrets before committing, directly in your browser.
Can I use Secret Scanner to redact all secrets found in pasted text?
Yes. Secret Scanner can redact all secrets found in pasted text, directly in your browser.
Is my data uploaded to a server?
No. This tool runs entirely in your browser — your input is processed locally on your device and is never uploaded or stored on a server.