All tools

SECRET SCANNER

Check for credentials before you share it

Paste a config file, an .env, or a snippet of code and see what in it looks like a live credential. Everything is scanned in this tab.

Nothing you paste here leaves your browser. There is no upload, no server call, no analytics and no telemetry — not even an anonymized count of what was found. The scanning runs in this page, on this machine, and the text is gone when you close the tab.

Or load a file instead