Secret Scanner
Scan pasted code or .env files for API keys, tokens, passwords and AWS keys with pattern-based detection.
Detects common key formats (AWS, GitHub, Slack, Stripe, Google, private keys, JWTs, connection strings…). Nothing is uploaded — the scan runs in your browser.
About Secret Scanner
Scan pasted code or .env files for API keys, tokens, passwords and AWS keys with pattern-based detection.
Secret Scanner does the security work in your browser using well-known algorithms, so sensitive input never has to be sent to a remote server.
How to Use Secret Scanner
- Enter the secret text, file or value you want to process.
- Choose the algorithm, key or options required.
- Run the operation — the output appears instantly and locally.
- Copy the result safely.
Key Features
- Encryption and hashing run locally — your secrets stay on your device.
- Uses established, well-documented algorithms and standards.
- No account, no key storage, no data retention.
Frequently Asked Questions
Is Secret Scanner safe to use with sensitive data?
Yes. Secret Scanner runs entirely inside your browser using in-page cryptography, so your inputs are never uploaded, logged or shared.
Is Secret Scanner free to use?
Yes. Secret Scanner is completely free with unlimited use — no account, download or payment required.
Is my data uploaded to a server?
No. Secret Scanner runs entirely in your browser. Your inputs are never sent to our servers or stored anywhere.
Does Secret Scanner work on mobile?
Yes. The interface is fully responsive and works in any modern browser on Android, iPhone, tablets and desktops.
Related Security Tools
SSL Certificate Format Converter
Convert certificates between PEM, DER and P7B formats. Detect key and certificate types.
SSL Certificate Decoder
Paste a PEM certificate and decode its subject, issuer, validity dates and key details.
SSL Certificate Generator
Create a self-signed SSL/TLS certificate right in your browser. Generate a PEM key + cert.
HTTP Security Headers Analyzer
Paste your response headers and get a security grade with fixes for missing headers.