Catch a leaked API key before anyone else sees it

LeakLock spots passwords, API keys and tokens in what you are about to share, and replaces them with a masked value in one click. Everything runs on your own device.

For Chrome

Paste a live token into a GitHub issue, pull request, comment or gist and LeakLock holds the paste back and asks first. Choose Redact to paste a masked value, or Paste anyway. Runs only on github.com and gist.github.com, with no network access.

For VS Code

Underlines credentials in your code as you type, and offers Redact or Ignore as a quick fix (Ctrl+.). On save it also flags long random-looking values assigned to names like secret or password.

VS Code Marketplace Open VSX (VSCodium, Cursor, Windsurf)

Recognises AWS, GitHub, Stripe, Slack, Google, npm, OpenAI and Anthropic keys, private key blocks and database URLs with passwords. Read the privacy policy.