Secret & API Key Redactor: Mask Tokens and PII Before Sharing
Scan logs, config files or stack traces for AWS keys, GitHub tokens, JWTs, private keys, emails and IPs, then mask them in one click. Ideal before pasting output into a bug report or an AI chat.
Quick answer
Secret & API Key Redactor is a free online tool that scan logs, config files or stack traces for AWS keys, GitHub tokens, JWTs, private keys, emails and IPs, then mask them in one click. Ideal before pasting output into a bug report or an AI chat.
- Cost: free, no signup or limits.
- Privacy: runs 100% in your browser; text is never uploaded.
- Works on: desktop and mobile browsers, offline once loaded.
- Category: Content Cleanup.
AWS_ACCESS_KEY_ID=[REDACTED:AWS] api_key: [REDACTED:SECRET] Authorization: Bearer [REDACTED:JWT] contact: ada@example.com from 192.168.1.24
How to Use
- 1.Paste the log, config or snippet you want to sanitise.
- 2.Pick which secret types to detect and choose a masking style.
- 3.Copy the redacted output — the match counter shows what was found.
FAQ
Does the text get uploaded for scanning?
No. Detection uses local regular expressions in your browser; nothing is transmitted.
Will it catch every secret?
It covers the common formats (AWS, GitHub, Stripe, Google, Slack, JWTs, PEM keys, key=value pairs), but always review the output before sharing.
What is partial masking?
It keeps the first and last four characters so you can still correlate a token in logs without exposing it.