Secret Scanner & Redactor
Find known API keys, tokens, webhooks, database passwords, and Bearer headers before sharing text.
Scan a configuration file or log locally
Supported: .env, JSON, JSONC, YAML, TXT, and LOG. The scanner does not parse or reformat your file; it changes only values you select.
Your data is processed locally in your browser whenever supported and is not uploaded to our servers.
How it works
Review known secrets before you share a config file or log.
The scanner finds specific API keys, tokens, webhooks, database passwords, and Bearer headers. It preserves all text other than values you deliberately select for redaction.
Will it redact every value in my .env file?
No. Redacted-copy mode changes only findings you select. The separate .env example mode intentionally clears all .env values and redacts any remaining known secret pattern.
Does this validate every possible secret?
No. It looks for a narrow list of known, structured patterns. A clean result is not proof that text is safe to share.
Does it reformat JSON or YAML?
No. It uses direct text replacement and does not parse or rewrite your file. Only selected matching values change.
Is my file uploaded?
No. Scanning, selection, preview, and download happen in your browser.
Keep working
Related tools
AI Prompt PII Sanitizer
Mask deterministic sensitive details before sharing text with an AI, then restore exact tokens locally.
Open tool →File Hash Generator
Calculate SHA-256, SHA-384, or SHA-512 checksums for files locally and compare an expected hash.
Open tool →Text Diff Checker
Compare two texts and spot added, removed, and edited lines with word or character highlights. Your text stays in your browser.
Open tool →