Secret Scanner
Scan pasted code or text for likely leaked secrets.
Paste code or text
Findings
Scanned entirely in your browser — nothing is uploaded.
Paste text to scan for likely secrets and credentials.
About the Secret Scanner
Scan pasted code, .env contents, or logs for patterns matching AWS keys, private keys, GitHub/Slack/Stripe tokens, JWTs, and generic high-entropy strings. Findings show the line number and a masked preview so nothing sensitive is fully exposed on screen.
Examples
Leaked AWS key
AKIAIOSFODNN7EXAMPLEOutput
AWS Access Key ID found on line 1Keyboard shortcuts
- Copy the main outputCtrl / ⌘ + Shift + C
- Download the resultCtrl / ⌘ + S
- Share this toolCtrl / ⌘ + Shift + S
- Reset the inputsAlt + R
- Open the tool search paletteCtrl / ⌘ + K
Related tools
SSH Key Fingerprint Formatter
Security
Parse an OpenSSH public key and show its SHA256/MD5 fingerprints.
SSL CSR/Certificate Decoder
Security
Decode a PEM CSR or certificate into its ASN.1 structure.
Password Strength Checker
Security
Estimate password entropy, crack time, and get actionable advice.
CORS Config Generator
Security
Generate CORS headers/config for Nginx, Apache, Express, or Workers.
CSP Builder
Security
Build a Content-Security-Policy header from per-directive sources.
Htpasswd Generator
Security
Generate .htpasswd lines using SHA-1 or plain text.
Frequently asked questions
Version 1.0.0 · Updated 2026-08-06 · Runs entirely in your browser