Tool

Token and secret helper: scanner, generator and JWT decoder

Before you paste a log into an issue, a chat or an AI assistant, run it through the scanner. Nothing you type here is sent anywhere.

1. Secret scanner and redactor


2. Secret generator

3. JWT decoder


If a token leaked

  1. Revoke first, investigate second. Telegram: BotFather /revoke. Discord: Developer Portal, Bot, Reset Token. Slack: rotate in the app settings. GitHub: delete the token.
  2. Deploy the new value from your secret store, not from a file in the repository.
  3. Rewrite Git history only after rotating: forks and caches keep the old commit.
  4. Review what the token could do during the exposure window (messages sent, webhooks changed, servers joined).

Pattern matching finds known formats only. Pair it with Gitleaks or TruffleHog in CI and read the bot security guide.