Ferramentaoolis691
Voltar Voltar to Desenvolvedor
🔑

Detector de Vazamento de API Keys — Ferramenta online grátis

Escaneie textos ou arquivos em busca de API keys vazadas — 20+ provedores

Detecte chaves vazadas de OpenAI, Anthropic, AWS, GitHub, Stripe, Google em texto. Scanner de segurança 100% no navegador. Sem cadastro.

📚
Saiba mais

Free API key leak detector — 20+ providers, 100% private

Ferramentaolis API Key Leak Detector scans text for leaked credentials from 20+ providers. Perfect for code review, commit auditing, or verifying that a text sample (like a bug report) doesn\'t contain real keys. Everything runs in your browser.

How to use this tool

  1. 1

    Paste text or code

    Any text — code snippets, config files, commit diffs, chat logs, emails.

  2. 2

    Review detected leaks

    Each found key shows provider, severity, and risk. Click to highlight in text.

  3. 3

    Rotate leaked keys immediately

    If a key is confirmed leaked — rotate it NOW at the provider dashboard. Old keys are already in Git history + third-party logs.

Detected providers + formats

OpenAI:
sk-..., sk-proj-...
Anthropic:
sk-ant-...
AWS:
AKIA[0-9A-Z]16
GitHub:
ghp_, gho_, ghu_, ghs_, ghr_ (36 chars)
Stripe:
sk_live_, sk_test_, pk_live_, pk_test_
Google:
AIza... (39 chars)
Slack:
xoxb-, xoxp-, xoxa-
SendGrid:
SG.[21 chars].[43 chars]
JWT tokens:
eyJ[base64].eyJ[base64].[signature]

⚠️ If you found a leaked key

  1. Rotate immediately at the provider dashboard — don\'t just delete from code
  2. Audit logs for unauthorized use during the leak window
  3. Check Git history: key is likely in old commits — use git filter-repo or BFG to purge
  4. Nãotify affected users if customer data was potentially accessed
  5. Add secret scanning to your CI/CD pipeline to prevent recurrence

Frequently Asked Questions

Which API keys does this detect?
OpenAI (sk-...), Anthropic (sk-ant-...), AWS (AKIA...), GitHub (ghp_, gho_, ghu_, ghs_, ghr_), Stripe (sk_live_, sk_test_, pk_live_, pk_test_), Google (AIza...), Slack (xoxb-, xoxp-, xoxa-), Twilio (AC...), SendGrid (SG....), Mailgun (key-...), Discord bot tokens, and generic JWT tokens.
Is this data sent anywhere?
Não. All detection runs client-side via regex. Your code never leaves your browser. Safe for proprietary code + production secrets.
False positives?
Possible — any string matching the exact pattern. Always verify. We check prefix + length + character set to minimize false positives.
What if I found a leaked key?
Rotate immediately. Don't just delete from code — rotate at the provider (OpenAI dashboard, AWS IAM, etc.) because the key is already in Git history, logs, or wherever it leaked. Never trust rotation via deletion alone.
Can I scan Git history?
Nãot directly here. Use git log -p | [this tool] after copying output, or tools like truffleHog / gitleaks for automated Git scanning.
Do you detect passwords too?
Nãot reliably — passwords have no fixed format. For password detection, look for common variables (password=, PASSWD, DB_PASS).

Pontos-chave

  • API Key Leak Detector is a free, browser-based developer tool — scan text or files for leaked api keys — 20+ providers.
  • Não signup, no downloads, no file uploads. Ferramentas run in your browser; the few that need an outside service say so on the page.
  • Works on desktop, tablet, and mobile. Install as a PWA for offline access.

How to Use API Key Leak Detector

  1. Open the tool: Launch API Key Leak Detector on Ferramentaolis — no account or download needed.
  2. Enter your data: Paste text, enter values, or select a file directly in your browser.
  3. Get instant results: Everything is processed locally — results appear immediately.
  4. Copy or download: Save your output or share it. Bookmark for quick access next time.

API Key Leak Detector — Quick Facts

Preço
Grátis — sem limites, sem marca d’água, sem paywall
Privacidade
Processado no seu navegador. Ferramentas que precisam de um serviço externo avisam isso na página. As visitas são contadas (Google Analytics).
Plataforma
Qualquer navegador moderno — desktop, tablet ou celular
Categoria
Desenvolvedor Ferramentas on Ferramentaolis
Offline
Works offline after first visit (Progressive Web App)
RecursoDetalhes
FerramentaAPI Key Leak Detector
CategoriaDesenvolvedor
Cadastro necessárioNão
Upload de arquivoNenhum — processado no navegador
Suporte mobileTotalmente responsivo
CustoGrátis para sempre

Why Use API Key Leak Detector?

You should try API Key Leak Detector for a quick, private way to scan text or files for leaked api keys — 20+ providers. Processing happens in your browser and files are never uploaded; the few tools that need an outside service say so on the page.

On the other hand, dedicated APIs or desktop tools suit batch processing better. They also handle server-side automation. For everyday tasks, browser tools offer the best speed, privacy, and convenience.

You might also like

Exposed Secrets Scanner

Detect API keys, tokens in code

Open

AI Text Detector

Detect AI-generated text with rule-based heuristics

Open

Display PPI / Resolution Detector

Pixel density, screen size, color depth — live

Open
🔒
100% Privacidade. Esta ferramenta funciona inteiramente no seu navegador. Seus dados nunca são enviados a nenhum servidor.