Secret Redactor
Scrub API keys, tokens and secrets out of text before sharing it.
Processed locally in your browser. Nothing you enter is uploaded or stored.
Overview
Scans pasted text — logs, config files, code snippets — for common secret patterns (API keys, bearer tokens, private key blocks, JWTs) and replaces them with a labeled placeholder before you share it.
How to use it
- 1Paste text that might contain secrets.
- 2Review the redacted output and what was found.
- 3Copy the redacted version to share safely.
Tips
- This uses pattern matching, not a full secret-scanning engine — always review the redacted output yourself before sharing, especially for custom or unusual secret formats it might miss.
Related tools
All developer toolsHash GeneratorGenerate MD5, SHA-1, SHA-256 and SHA-512 hashes.Text Redactor for AIRedact emails, phone numbers and other PII before sending text to an AI model.Password Strength CheckerCheck a password's strength and estimated crack time.HMAC GeneratorGenerate an HMAC signature for a message with a secret key.