Secret Redactor
Scrub API keys, tokens and secrets out of text before sharing it, with custom patterns for your own formats.
Processed locally in your browser. Nothing you enter is uploaded or stored.
- Recognises the common shapes: cloud keys, sk-/sk_-prefixed AI and payment API keys, bearer tokens, `-----BEGIN … KEY-----` blocks, JWTs.
- Add a custom regex pattern for a token scheme specific to your own systems that the built-in patterns can't know about.
- Replaces each with a labelled placeholder so the text still reads clearly.
- Redaction happens in your browser — the original secrets never leave your device.
Why this is private
- Processed locally in your browser. Nothing you enter is uploaded or stored.
- Open your browser's DevTools → Network tab while using this tool — you won't see a request carrying your input, because it never leaves your device.
- Nothing you enter is uploaded to a server or shared with us — the processing happens entirely on your device.
Overview
Scans pasted text — logs, config files, code snippets — for common secret patterns (API keys including OpenAI/Anthropic/Stripe-style sk- keys, bearer tokens, private key blocks, JWTs) and replaces them with a labeled placeholder before you share it. Add your own custom pattern for token schemes it doesn't already know.
How to use it
- 1Paste text that might contain secrets.
- 2Review the redacted output and what was found.
- 3Add a custom pattern below for any token scheme specific to your systems.
- 4Copy the redacted version to share safely.
Tips
- This uses pattern matching, not a full secret-scanning engine — always review the redacted output yourself before sharing, especially for custom or unusual secret formats. If you know the shape of a format specific to your systems, add it as a custom pattern instead of relying on manual review alone.
Frequently asked questions
What people use it for
Clean a log before attaching it to a ticketStrip tokens and keys from a stack trace or request dump.
Share a config file for reviewRedact credentials from an `.env` or YAML sample before pasting it.
Sanitise a snippet for a public questionRemove secrets before posting code to a forum or chat.
Prep text for an AI toolRedact keys — including a bare pasted `sk-...` API key from a stack trace — before pasting a log into a chatbot for help.
Redact an internal token formatAdd a custom pattern for a company-specific credential or token scheme the built-in patterns don't recognise.
Related tools
All developer toolsHash GeneratorGenerate MD5, SHA-1, SHA-256 and SHA-512 hashes, in hex or Base64, with a compare mode.Text Redactor for AIRedact emails, phone numbers and other PII before sending text to an AI model, with custom patterns.Password Strength CheckerCheck a password's strength and estimated crack time.HMAC GeneratorGenerate an HMAC signature for a message with a secret key.
Ready to use Secret Redactor?
Secret Redactor