Home / Developer / Secret Scanner

Secret Scanner

Scan files, a folder or a ZIP for API keys, tokens, passwords and private keys before you share or commit.

Free, no uploads, no sign-up. Runs 100% in your browser.

How Secret Scanner works

Each file is checked against more than 25 patterns for well-known key formats (cloud, code hosting, payment, chat and AI services), database URLs with passwords, private key blocks and assigned passwords. An optional check flags long random-looking strings. Matches are masked on screen and in the report.

Input: Any text file, ZIP, Folder. Output: JSON.

How to use Secret Scanner

1. Open Secret Scanner and paste or type your input.
2. Results update instantly as you type.
3. Tweak options such as format, indentation or algorithm.
4. Copy the output or download it as a file.

Tips

• If a real key shows up, rotate it. Deleting it from the file is not enough once it has been shared.

Secret Scanner FAQ

Are my files uploaded?

No. This tool runs entirely in your browser tab. Files are read from your disk into memory and the result is generated locally.

Is it free? Are there limits or watermarks?

Free and open source (MIT). There are no file-size caps, daily quotas, accounts or watermarks.

Does it work offline?

Yes, once the page (and any engine it needs) has loaded, it keeps working without a connection thanks to the service worker cache.

Related tools

• EXIF Viewer & Remover: Inspect camera/GPS metadata and strip it for privacy.
• Encrypt / Decrypt Text & Files: Password-protect text or any file with AES-256-GCM, ChaCha20-Poly1305 or OpenSSL-compatible AES.
• Embedded File Extractor: Find and pull out pictures, PDFs, archives and audio hidden inside any file, like a lighter binwalk.
• JSON Formatter: Prettify, validate, minify and explore JSON as a tree.