Scan text and code for leaked secrets and credentials. Detects Stripe keys, GitHub tokens, Slack tokens, Google API keys, AWS keys, OpenAI keys, JWT tokens, private keys, and config passwords. Everything runs locally in your browser — nothing is uploaded.
HTTP headers (analyzer, generator for JSON/REST/GraphQL, cache header generator, status code checker), CORS & rate limit (CORS header generator, policy tester, rate limit header parser), env/config (.env parser, variable template generator, AMQP exchange config), and dev config (ESLint configs for React/Node/TypeScript/Next.js, HTTP retry policy builder with exponential/linear/circuit-breaker).
Generate cryptographically secure random tokens in hex, base64, or alphanumeric format. Perfect for API keys, session tokens, and secrets.
Scan thousands of log files or codebase files for regex patterns (IPs, API keys, URLs) and extract or replace them. Visual builder for non-coders with live preview.
Generates Unicode-styled text variants for bold, italic, monospace, fraktur, script, serif, and sans-serif — optimized for code comments, design mockups, Discord formatting, and technical documentation where visual emphasis matters beyond standard fonts.
Applies five distinct text transformations: reverse entire string order, reverse each word individually, flip upside down using rot180 Unicode, mirror horizontally, and rotate 180 degrees. Perfect for creating puzzles, secret messages, palindromes, and attention-grabbing social media content.
Secret Scanner lets you scan text and code for leaked secrets and credentials. Detects Stripe keys, GitHub tokens, Slack tokens, Google API keys, AWS keys, OpenAI keys, JWT tokens, private keys, and config passwords. Everything runs locally in your browser — nothing is uploaded.. It works on any device with a modern web browser.
Scan text and code for leaked secrets and credentials. Detects Stripe keys, GitHub tokens, Slack tokens, Google API keys, AWS keys, OpenAI keys, JWT tokens, private keys, and config passwords. Everything runs locally in your browser — nothing is uploaded. It's ideal for developers, designers, and anyone who needs to scan text and code for leaked secrets and credentials without installing software or sending data to external servers.
Direct text entry, file upload, or URL-based input — depending on the tool. Paste or type your content directly into the provided editor area.
Yes. After the initial page load, Secret Scanner runs entirely on your device with no internet connection needed. All processing is done locally.
Tools cover JavaScript, CSS, HTML, SQL, Python, JSON, XML, CSV, and more. Check individual tool descriptions for specifics.
No. All code processing — formatting, minification, conversion, hashing — runs locally in your browser.
Yes. Since processing is local, performance depends on your device. Most operations handle large files without issue.
Yes. SQL uses sql-formatter, JSON uses native JSON.parse, and other formatters follow widely adopted formatting rules.
Yes. All developer tools work fully offline after the initial page load.
Time Converter
Convert between time units including seconds, minutes, hours, days, weeks, months, and years with precise decimal results.
Diff Checker
Compares two input texts side-by-side, highlighting inserted, deleted, and changed lines with distinct background colors.
Regex Tester
Provides an interactive environment where users can write a regular expression pattern, test it against sample strings, and view real-time match.
JSON Formatter
Pretty-prints raw JSON with configurable indent width, key sorting, and bracket collapsing options while flagging syntax errors with exact.
JS Minifier
Strips comments, whitespace, and shortens local variable names in JavaScript source without altering execution semantics.
Base64 Encode/Decode
Encodes text or small files into Base64 strings and decodes them back with automatic MIME-type detection for binary safety.