Input
GITHUB_TOKEN=ghp_...
Finding
1 high-risk GitHub token match
Developer Tools
Secret & Credential Leak Detector
Scan text for API keys, tokens, and passwords locally in your browser. Recognizes common AWS, GitHub, Slack, Stripe, and generic secret patterns.
SecuritySecretsReview
Favorite this tool
No favorite storage mode has been selected.
Quick actions
Copy this tool URL or open the system share sheet on a supported device.
开发工具
Secret Scanner
检测结果
等待输入
在左侧输入文本后会自动检测
支持检测的类型
AWS Key GitHub Token Slack Token Stripe Key Private Key Generic API Key Generic Secret Google API Key Twilio Key SendGrid Key Heroku Key npm Token
Use cases
- Pre-commit checks for accidental keys
- Review config files for secrets
- Sanitize logs before sharing
How to use
- Paste code or configuration
- Review automatic pattern matches
- Check severity and line hints
Example input and output
FAQ
Is data uploaded?
No. Scanning runs locally; nothing leaves the page.
Which platforms are covered?
Common cloud and SaaS token shapes plus generic API key/password patterns—extend with care for custom formats.
Tools
Related tools
Continue with another translated tool for a nearby task.
Regex Tester
Regular Expression Tester Online
Test JavaScript regular expressions with live highlighting, match counts, capture groups, flag toggles, and built-in pattern presets. Matching runs locally in your browser.
Regex Testing Developer
Text Data Masker
Text Masker — Phone, ID, Email Redaction
Detect and mask phones, national IDs, bank cards, emails, IPs, and Chinese names in plain text locally—ideal before sharing logs or documents.
Masking Privacy Text