Privacy first
No API calls. No server. All detection and replacement runs in your browser. Your text never leaves your device.
Detect API keys, passwords, emails, credit cards, and more. Click a highlight to remove, mask, or edit. Nothing is sent to any server.
No API calls. No server. All detection and replacement runs in your browser. Your text never leaves your device.
Uses secrets-patterns-db and PII patterns. API keys, passwords, emails, credit cards, SSNs, phone numbers, JWTs, private keys, database URLs, and more.
Click any highlighted detection to Remove, Mask, Edit, or Skip. Mark false positive detections with the ignore button so they don't show up again.