hasmyapikeybeenstolen.com All systems operational (unlike some platforms)

Has my API key been stolen?

Paste your API key, token or secret below to check it against 14,203,991,442 leaked credentials from breaches, paste sites and the dark web.

🔒 Protected by military-grade vibes. Your key is never sent anywhere.*

100%detection rate
0false negatives, ever
0keys you've pasted here
SOC 2 Type 0 ISO 27001-ish As seen on the dark web Zero-trust (we trust zero people who paste keys)

OK, real talk

This page runs entirely in your browser. Nothing you pasted left this tab. There's no server, no form submission, no analytics and no third-party scripts, and the page's Content-Security-Policy blocks it from talking to the network at all. It's three small files. Read the script.

But you didn't know any of that when you pasted it. The next site might log it, your browser's spellchecker might ship it off to the cloud, and a sketchy extension can read any text box you type in. So: rotate the key anyway, keep secrets in a secrets manager, and never paste one somewhere just because a page asked nicely.

Where to rotate