Hide API keys before anyone sees them.

Cloud consoles, GitHub, CI logs, web IDEs: keys and tokens on the page are hidden the moment you share. Detection runs in your browser, so nothing leaves your machine.

Add to Chrome, free

Edge

Firefox

Also works inOperaBraveOpera GXVivaldiArcDiaZenLibreWolfWaterfoxFloorp

7-day free trial. No card. Nothing leaves your browser.

Contacts

Add contact

Monthly revenue$48,210

Open deals27

Renewals this month6

Name	Email	Phone	MRR	Status
ALAnn Lee	ann.lee@acme.example	+1 212 555 0101	$1,200	Active
BSBob Stone	bob@northwind.example	+44 20 7946 0958	$3,400	Active
CDCara Diaz	cara@globex.example	+34 600 123 456	$980	Trial
DPDev Patel	dev@initech.example	(415) 555-2671	$12,000	Active
ENEli Novak	eli.novak@umbrella.example	+1 646 555 0199	$2,150	Paused
FMFay Moreau	fay@soylent.example	+33 6 12 34 56 78	$4,700	Active
GTGus Tan	gus.tan@hooli.example	+65 9123 4567	$760	Trial

.env.production

1NODE_ENV=production

2APP_URL=https://app.northstar.example

3STRIPE_SECRET_KEY=sk_live_51NxEXAMPLEa8Kd92mZQpL0wYtR4vB7cH

4DATABASE_URL=postgres://admin:hunter2pass@db.internal:5432/app

5GITHUB_TOKEN=ghp_EXAMPLE1234567890abcdefEXAMPLE123456

6OPENAI_API_KEY=sk-proj-EXAMPLEq9X2vL7mN4bR8tY1wZ5kJ3hG6fD0s

7SENTRY_DSN=https://3f9a2b@o450.ingest.sentry.example/123

8LOG_LEVEL=info

TerminalOutput

~/northstar $ vercel deploy --prod

Using STRIPE_SECRET_KEY=sk_live_51NxEXAMPLEa8Kd92mZQpL0wYtR4vB7cH

✓ Deployed to app.northstar.example in 14s

Payroll · March 15

Approve run

Total net pay$84,212.07

Employees24

Funding accountGB29 NWBK 6016 1331 9268 19

Employee	SSN	Bank account	Net pay
DKDana Kim	078-05-1120	GB82 WEST 1234 5698 7654 32	$4,820.00
LOLuis Ortega	219-09-9999	DE89 3704 0044 0532 0130 00	$5,310.50
ACAva Chen	457-55-5462	FR14 2004 1010 0505 0001 3M02 606	$6,105.00
NHNoor Haddad	323-45-6789	NL91 ABNA 0417 1643 00	$4,410.25
TBTom Becker	512-34-8890	GB33 BUKB 2020 1555 5555 55	$3,980.00
MSMia Santos	448-21-0937	ES91 2100 0418 4502 0005 1332	$4,125.60
OAOmar Aziz	219-09-9999	FR14 2004 1010 0505 0001 3M02 606	$3,612.40

Every name and number is made up.

Sound familiar?

My Stripe key was on screen for two seconds.Live keys are hidden before the page shows them.
A teammate shared the AWS console with an access key visible.Cloud consoles can be covered whole while you share.
The token was in the build log, not where I was looking.It reads the whole page, logs included.

What it hides for you.

API keys: Stripe, OpenAI, Anthropic, AWS
Tokens: GitHub, Slack, JWT, Bearer
Database URLs: Automatically
Passwords: Automatically
Private keys: Automatically
Your own patterns: Add them to your words

Set it up once. Then forget it.

1 Add it to your browser
2 Tell it what’s private, once
3 Share as usual

Works with what you already use

Zoom
Google Meet
Slack
Discord
Loom
OBS Studio
Twitch

Questions, answered.

Does it work in VS Code or my terminal app?

No. It works on web pages: cloud consoles, GitHub, CI logs, docs and browser IDEs like Codespaces. Desktop apps are outside the browser.

Is blur safe enough for secrets?

Pick Blackout for secrets. It puts a solid box over the text, so there’s nothing to sharpen afterwards.

Does it send my page anywhere?

No. Detection runs in your browser. Nothing on the page is uploaded, and there’s no account.

Which secrets does it know?

Keys from Stripe, OpenAI, Anthropic, AWS and GitHub, Slack tokens, JWTs, Bearer tokens, private keys, passwords and database connection strings. Add your own words or patterns for anything else.

More answers on the homepage, or . A person answers.

$59 once. Yours for good.

Every feature, every browser, every update. Free for 7 days, no card.