LeakLock: Secret & Credential Guard

Intercepts and redacts accidentally pasted API keys, tokens, and secrets before they leave your browser.

LeakLock stops you from posting a live API key, token or password on GitHub by mistake. When you paste something that looks like a real credential into an issue, pull request, comment or gist, LeakLock holds the paste back and shows a small warning. The warning names the type of secret without displaying it, and you choose: • Redact Secret: pastes a masked value such as ghp_...[REDACTED] where your cursor was • Paste anyway: pastes exactly what you copied The warning waits for your choice, so nothing is lost if you look away. Credentials typed straight into a field are caught too. WHAT IT RECOGNISES Thirteen credential formats: access keys and tokens from widely used cloud, code hosting, payment, chat and AI services, private key blocks, and database connection URLs that contain a real password. LeakLock matches the exact formats these services issue, so ordinary code, commit hashes, UUIDs and obvious placeholders such as your_api_key_here are left alone. PRIVATE BY DESIGN • Runs only on github.com and gist.github.com • Every check happens inside the page, on your device • No network access, no account, no analytics • Never stores what you paste or type. The only thing saved is a count of warnings, shown in the popup. Privacy policy: https://leaklock.pages.dev/privacy Made by BAB Studios. Questions or a format you want covered: babstudios.app@gmail.com