Safe to paste?
Paste text below to check it for secrets and personal data before it goes into an AI tool.
Nothing leaves your browser. This page makes no network requests, and its security policy blocks them. It helps catch common mistakes. It can't catch everything, so a clean result doesn't mean the text is safe.
Redacted copy
Flagged items replaced with labels. Read it through before using it.
What it looks for
- Secrets: private keys, AWS, GitHub, Anthropic, OpenAI, Stripe, Google and Slack keys, JWTs, bearer tokens, passwords and keys in
name=valuelines, and URLs with a username and password in them. - Personal data: email addresses, UK phone numbers, card numbers, IBANs and National Insurance numbers.
- Infrastructure: IP addresses, internal hostnames and usernames in file paths.
If a real secret has already been pasted somewhere it shouldn't be, treat it as exposed and rotate it.