MSRXTools / Developers
Leaked secret finder
Paste code, logs or config and find API keys, tokens and private keys before you commit or share them.
Runs in your browser
Loading tool…
Good to know
- Run it on anything before posting it to GitHub, Stack Overflow, a ticket or a chat.
- If a real secret was ever committed, rotate it. It stays in git history even after you delete the line.
- For repositories, add a pre-commit secret scanner such as gitleaks.
Related tools
Hash & checksum generator
SHA-1, SHA-256, SHA-384 and SHA-512 of text or a file, plus checksum verification for downloads.JWT decoder & auditor
Decode a JSON Web Token and flag the risky parts: alg none, expired or missing exp, long lifetimes and sensitive claims.Encoder & decoder
Base64, Base64URL, URL, HTML entities and hex, both ways. Handy for reading suspicious payloads safely.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.
SHA-1, SHA-256, SHA-384 and SHA-512 of text or a file, plus checksum verification for downloads.JWT decoder & auditor
Decode a JSON Web Token and flag the risky parts: alg none, expired or missing exp, long lifetimes and sensitive claims.Encoder & decoder
Base64, Base64URL, URL, HTML entities and hex, both ways. Handy for reading suspicious payloads safely.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.