Drop a .har, a log or any text here (or paste it below directly)
How to use
What it is
Before pasting a text, a log or a .har export (from the browser's network tools) into an AI chat, a support ticket or a public forum, it tells you what would leak with it: passwords, API keys, session cookies… Everything is checked in your browser; nothing is sent anywhere or saved.
Why a HAR is dangerous
A HAR stores the requests exactly as your browser made them, headers included. A session cookie or an Authorization header in there is literally the key to your account: whoever has it can impersonate you without knowing your password. That is why this tool always flags every cookie and authentication header, whether or not it has a recognizable shape.
What it can't see
Detects known patterns (AWS keys, JWT tokens, IBANs…) and fields that are sensitive by definition (cookies, authentication headers). A secret with an unusual shape that matches no pattern can slip through unnoticed. 'Nothing sensitive' is not a guarantee: it means nothing it knows how to look for was found.
For more control
This tool gives a quick verdict and a fully clean version in one go. To choose category by category, use reversible tokens, or revert afterwards, use the Anonymizer.
