Secret Scanner
Scan arbitrary text, config files, or diffs for accidentally-committed API keys, tokens, and credentials, with a confidence score per finding.
Secret Scanner tool
Secret Scanner is not available yet
Scan arbitrary text, config files, or diffs for accidentally-committed API keys, tokens, and credentials, with a confidence score per finding.
Planned features
- Pattern + entropy-based secret detection
- Per-finding confidence scoring
- Works on diffs, config files, and plain text
- No data leaves your browser
Features may change before release.
Related Security Tools
Log Sanitizer
Mask secrets, tokens, and PII in logs before you share them.
JWT Decoder & Inspector
Decode a JWT, inspect its claims and expiry, and review potential security issues locally.
Image Metadata & AI Provenance Cleaner
Inspect image metadata, check supported AI provenance information, and remove hidden metadata locally.
JWT Generator
Build and sign a JWT for testing.
Explore more developer tools
Browse the full collection, or see everything in Security.