Compare .env variable names
Use .env Semantic Diff when the goal is to compare variable names or make an empty-value template instead of redacting selected secret values.
Compare .env filesPrivacy & Security Tools
Secret Scanner & Redactor
Find known API keys, tokens, webhooks, database passwords, and Bearer headers before sharing text.
Loading this local tool…
Data handling
Storage and export controls
- Retention
- The tool's working state is kept only while this page is open. Inputs and results are not saved to persistent storage by Got A Tool.
- Export
- The tool may prepare a result after you run it. It downloads or copies it only when you choose that action.
Advertising and analytics are separate site services. We do not send selected tool input to them. Read the Privacy Policy for details.
How it works
Review known secrets before you share a config file or log.
The scanner finds specific API keys, tokens, webhooks, database passwords, and Bearer headers. It preserves all text other than values you deliberately select for redaction.
Detects: supported OpenAI keys, GitHub tokens, Google API keys, Slack webhooks, JWTs, Bearer tokens, and passwords in supported database URLs. Does not specifically detect: AWS credentials, Stripe keys, npm tokens, private-key blocks, or standalone password assignments. A supported type still has to match a known pattern; zero findings does not mean a file is safe to share.
Choose the right review
Match the tool to the file you are preparing to share.
Browser network captures
Use HAR Privacy Sanitizer for a HAR file. It reviews supported headers, URL parameters, JSON, and form bodies without changing unsupported body formats.
Sanitize a HAR fileText for an AI prompt
Use AI Prompt PII Sanitizer when the risk is personal details in prose. It replaces supported values with exact tokens you can restore in the same tab.
Mask prompt detailsSafe example
See the review list before you use your own text.
The Try a safe example button above loads deliberately non-working values for an OpenAI-style key, a Bearer token, and a database password. It shows the exact supported matches, but selects nothing for redaction. No file is chosen or uploaded.
Will it redact every value in my .env file?
No. Redacted-copy mode changes only findings you select. The separate .env example mode intentionally clears all .env values and redacts any remaining known secret pattern.
Does this validate every possible secret?
No. It looks for a narrow list of known, structured patterns. A clean result is not proof that text is safe to share.
Does it reformat JSON or YAML?
No. It uses direct text replacement and does not parse or rewrite your file. Only selected matching values change.
What is the file limit?
When you choose a file, it must be smaller than 2 MB. Pasted text stays in the current browser tab; keep it to a manageable size for your device.
Is my file uploaded?
No. Scanning, selection, preview, and download happen in your browser.
Practical guide
Read the AI sharing preparation guide
Decide which details belong in a shareable copy, avoid asking a tool to guess, and inspect the result before you paste it elsewhere.
Open the guide →Keep working
Related tools
AI Prompt PII Sanitizer
Mask deterministic sensitive details before sharing text with an AI, then restore exact tokens locally.
Open tool →HAR Privacy Sanitizer
Remove supported secrets from HAR headers, URL parameters, JSON, and form bodies without silently changing unknown body formats.
Open tool →.env Semantic Diff
Compare .env files by key, find missing variables, flag simple syntax issues, and create a safe empty-value template locally.
Open tool →