Secret Detector Online - Find Accidentally Committed API Keys, Passwords, and Secrets

🕵 Secret Detector

Scan your code for accidentally committed API keys, passwords, tokens, and other secrets

✓ AWS Keys ✓ GitHub Tokens ✓ Private Keys ✓ Database Creds ✓ 30+ Patterns
🔍
Drop your code file or ZIP here to scan
Supports: .java, .js, .py, .php, .env, .json, .yaml, .properties, .zip and more
📄 Selected:
Scanning...
⚠ Error

Detected Secret Types

This tool detects over 30 types of secrets commonly found in source code:

☁ Cloud Provider Keys

AWS Access Keys, Secret Keys, GCP Service Accounts, Azure Storage Keys, Azure SAS Tokens

💻 API Tokens

GitHub tokens, Stripe API keys, Twilio keys, SendGrid keys, Slack tokens, NPM tokens

🔒 Private Keys

RSA private keys, OpenSSH keys, EC keys, PGP private keys

🗃 Database Credentials

JDBC connection strings, MongoDB URLs, MySQL passwords, PostgreSQL URLs

🔑 Authentication

JWT tokens, Bearer tokens, Basic auth headers, OAuth credentials

📝 Generic Patterns

API keys, passwords, secrets, and other sensitive configuration values

Encoding and Data Utilities

Encode, decode, measure sizes, and transform common formats.

Search Tutorials