For developers

Hide API keys, JWTs, and IPs before you tweet the screenshot.

RedactPro is the Chrome extension that auto-detects 11 secret patterns and redacts them with one keystroke — built for the moment you're about to share a terminal screenshot, a Stripe dashboard, or a code review.

+ Add to Chrome — Free Plans from $4.99/mo

~/project · zsh — about to screenshot ⌘+⇧+E

$ cat .env
OPENAI_API_KEY=sk-proj-aBcDeFgHiJkLmNoPqRsTuVwXyZ1234
ANTHROPIC_API_KEY=sk-ant-api03-abc123def456ghi789jkl012
DATABASE_URL=postgres://user:[email protected]:5432/prod
STRIPE_SECRET=sk_live_aBcDeFgHiJkL
JWT_SECRET=eyJhbGciOiJIUzI1NiIsInR5cCI6Ikp
REDIS_HOST=192.168.42.183

$ # ↑ all the secrets, hidden in 1 keystroke (Alt+Shift+E)

Eleven secret patterns. One keystroke.

Press Alt+Shift+E on any page. RedactPro scans every text node and redacts every match — no manual hunting, no missed keys.

OpenAI keys

Project keys, user keys, both formats.

sk-proj-… · sk-…

Anthropic keys

API03 format and future formats.

sk-ant-…

GitHub PATs

All 5 token types: ghp/ghs/gho/ghu/ghr.

ghp_… ghs_…

AWS access keys

IAM access key IDs.

AKIA…

Slack tokens

Bot, user, app, and admin tokens.

xoxb-… xoxp-…

JWTs

Three-part Base64URL JSON web tokens.

eyJ…

IPv4 addresses

Strict 0–255 octets.

192.168.42.183

UUIDs

RFC 4122 8-4-4-4-12 format.

9b2fc3c7-1f4a-…

Email addresses

RFC-ish — local + domain + TLD.

[email protected]

Credit cards

13-19 digits, with or without spaces.

4242 4242 4242 4242

SSNs

US format. We're working on more locales.

123-45-6789

Where developers actually use this

Three scenarios where one extension saves you a hour-long incident response.

Tweet thread

Sharing a "what I'm building" screenshot

You're about to tweet a screenshot of your terminal showing a clean test run. There's an env var visible in the bottom of the screen. Without RedactPro: you crop, edit in Preview, mess up the aspect ratio. With RedactPro: Alt+Shift+E, screenshot, tweet.

Code review

PR review with a terminal screenshot

The reviewer wants to see "the actual error" — but the error log includes the API key in the request URL. Drag a region over the URL with RedactPro before screenshotting; preserve the rest of the context.

Bug report

Filing a Sentry / Linear issue

The bug repro requires a screenshot of your prod dashboard. The dashboard has customer emails. RedactPro auto-detect runs in 1 second; you keep the visual context the engineer needs.

Twitch stream

Live coding on stream

Setup: keep RedactPro on, with auto-detect mapped to your stream-deck button. Anytime you tab to a window with secrets, one button hides them all. Beats remembering not to cat .env.