Your text
Safe to share
Automatic detection catches most secrets and personal data, but not everything — for example names in free text. Read the result before you share it, and add any words it missed under Also hide these words. If a real key was ever pasted somewhere public, revoke it; hiding it later does not make it safe.
What to hide
Numbered labels and fakes keep the same value as the same label everywhere, so the log still makes sense — and you can put the real values back later.
Put the real values back
Got an answer from an AI or a colleague that uses the labels? Paste it here and the original values are filled in again — on this device only.
Answer with labels
With real values
Show the list of replacements
This list contains the real secrets. Keep it private, and never share it together with the redacted text.
What it finds
🔑 Keys and tokens
AWS, GitHub, GitLab, OpenAI, Anthropic, Google, Stripe, Slack, Discord and Slack webhooks, SendGrid, Twilio, npm, Hugging Face, Shopify, JWTs, private key blocks, Bearer and Basic headers, cookies, passwords in URLs and connection strings, and
AWS, GitHub, GitLab, OpenAI, Anthropic, Google, Stripe, Slack, Discord and Slack webhooks, SendGrid, Twilio, npm, Hugging Face, Shopify, JWTs, private key blocks, Bearer and Basic headers, cookies, passwords in URLs and connection strings, and
password=, token: or api_key values in .env, JSON and YAML.👤 Personal data
Email addresses, phone numbers, IPv4 and IPv6 addresses, MAC addresses, card numbers (checked with the Luhn test), IBANs (checksum checked), Swedish personal ID numbers, US social security numbers, and user names in file paths like
Email addresses, phone numbers, IPv4 and IPv6 addresses, MAC addresses, card numbers (checked with the Luhn test), IBANs (checksum checked), Swedish personal ID numbers, US social security numbers, and user names in file paths like
/home/anna or C:\Users\anna.🔒 Private
Your text is never uploaded. The checks run in this page with JavaScript, so it also works offline once the page has loaded.
Your text is never uploaded. The checks run in this page with JavaScript, so it also works offline once the page has loaded.