Features
- 30 detectors: cloud and API keys, JWTs, Bearer tokens, passwords in URLs and config, cookies, private keys.
- Personal data: emails, phones, card numbers (checked with Luhn), IBANs, user names in file paths.
- Same value → same placeholder ([EMAIL-1]), so logs stay readable.
- Choose what to hide; copy or download the safe text.
How to use it
Paste text or open a log file.
Untick anything you want to keep.
Copy the safe text and paste it wherever you need help.
Free and private
Everything happens inside your browser: your files are read on your own device and are never uploaded, stored or seen by anyone else.
Questions
Can it find every secret?
It catches the common formats but not every possible secret - read the result before posting. If a real key was ever posted publicly, revoke and replace it.
Is my text uploaded?
No - detection runs in your browser.
Is it free?
Yes - free and unlimited, with no sign-up and no watermark.