Share the file, not the secrets
Logs, configs, and pastes carry credentials you never meant to hand over. Each tool here masks them — in your browser, before the file goes anywhere.
These pages are static files: there is no server behind them and no
upload. Every page also ships a Content-Security-Policy of
connect-src 'none', so your browser itself refuses to let
the page send anything — to us or to anyone. You don't have to take our
word for it: open DevTools, watch the Network tab while you work, and see
that nothing leaves your device.
Popular tools
- Log file redactorMask emails, IPs, API keys, JWTs, and passwords in a log before you share it.Open the tool →
- Paste scrubber for AI chatsScrub keys, tokens, passwords, and emails out of a paste before it goes into an AI chat.Open the tool →
- Secret scanner (detect-only)Check a file for API keys, tokens, and passwords before you commit or share it. A findings report — nothing is changed, downloaded, or uploaded.Open the tool →
Also: .env & config scrubberAccess-log IP anonymizerCSV sample anonymizercurl command sanitizerHAR sanitizer + viewerJSON redactorStack trace cleanerBrowse all tools →
Detection is pattern-based and best-effort — no scrubber can promise a clean file. Every tool shows a side-by-side preview of what changed and flags strings that merely look secret, so the final review stays yours. More on how this works →