DEVELOPER

Universal Secret Scanner

Never commit a secret again. Paste your code to scan for exposed API keys and sensitive tokens completely offline.

Universal Secret Scanner

Scan your code locally against 200+ known API key and token patterns before committing.

Clean

Secure Your Code

Accidentally committing an AWS key or Stripe token can cost thousands of dollars. This tool runs 100% locally in your browser, using advanced regex patterns to identify over 200 types of credentials across multiple cloud providers.

How to use this tool

Paste your source code or configuration file.
The tool immediately highlights any detected secrets.
Remove or rotate the compromised secrets before pushing your code.

Examples

Frequently Asked Questions

Can I configure custom regex patterns?

Yes, you can add custom patterns in the settings panel to detect internal company tokens.

Zero-Knowledge .env VaultEnd-to-End encrypted .env sharing.

Universal Secret Scanner