Secret Scanner
Scan pasted code or text for likely leaked secrets.
Paste code or text
Findings
Scanned entirely in your browser — nothing is uploaded.
Paste text to scan for likely secrets and credentials.
About the Secret Scanner
Scan pasted code, .env contents, or logs for patterns matching AWS keys, private keys, GitHub/Slack/Stripe tokens, JWTs, and generic high-entropy strings. Findings show the line number and a masked preview so nothing sensitive is fully exposed on screen.
Examples
Leaked AWS key
AKIAIOSFODNN7EXAMPLEOutput
AWS Access Key ID found on line 1Related tools
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
JWT Inspector
Security
Decode a JWT and audit its claims for common issues.
Robots.txt Security Checker
Security
Scan robots.txt for accidental disclosure of sensitive paths.
Frequently asked questions
Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser