Private secret scrubber
Paste text to find and mask possible secrets.
Paste logs, JSON, CSV, or text into the input box below. The tool finds and replaces possible API keys, JWTs, private keys, and personal data without uploading your input.
Paste text, logs, JSON, or CSV
Try the safe dummy values first. Detected types are replaced only in the result with <REDACTED:TYPE_NUMBER>. These example values are not real credentials.
See an input and output example
Input: {"api_key":"sk-demo-1234567890abcdef","email":"taro@example.com","phone":"090-1234-5678"}
Output: {"api_key":"<REDACTED:TOKEN_1>","email":"<REDACTED:EMAIL_1>","phone":"<REDACTED:PHONE_1>"}Enter text or choose a file first.
Limits: 2 MB / 200,000 characters. Input, originals, and replacement maps are not stored or uploaded.
Important limits
- This is not guaranteed DLP or an audit certificate. Review the masked result manually before sharing.
- If a key or password may have leaked, revoke and rotate it immediately; masking alone does not make it safe.
- Original values and reversible replacement maps are not saved. Keep originals only under your own information-management rules.
- Continue to the JSON/CSV workbench, text diff, or string-length checker for further local checks.
Check your organization’s information-handling policy before pasting sensitive data into any tool.
Secret-management reference: GitHub Secret Scanning