Secrets & Sensitive Data Scanner

Scan code, logs, .env files, JSON, and pasted text for API keys, tokens, private keys, database URLs, and high-entropy secrets. Export a redacted copy locally.

Load files

5 findings

Generic emails and phone numbers are intentionally not the focus; this tool targets credentials and sensitive developer data.

medium@0

.env assignment

Environment variable likely contains a secret.

OPENAI_API_KEY=sk-example12345678901234567890

high@15

OpenAI style key

API key style secret.

sk-example12345678901234567890

medium@61

Bearer token

Authorization header token.

Bearer abcdefghijklmnopqrstuvwxyz123456

low@68

High entropy string

Long random-looking value. Review before sharing.

abcdefghijklmnopqrstuvwxyz123456

high@101

Database URL

Connection string may include credentials.

postgres://user:pass@example.com/db

This tool runs entirely in your browser. No data is sent anywhere.