Free secret checker

Paste code, a bundle or a config file. We look for API keys and tokens, using the same rules as our scanner.

Private by design: the check runs entirely in your browser. What you paste is never sent anywhere.

Found a real key? Treat it as stolen: rotate it at the provider first, then remove it from your code.