Developer screenshots
Hide API keys and tokens in screenshots before you share them
A screenshot for a bug report, a docs page or a Stack Overflow question can easily include a live key in a terminal, an .env file or a dashboard. Screenshot Studio reads the image on your device, boxes common key and token formats for you, and the screenshot never leaves your computer.
Drop a screenshot here, or click to choose
PDF, PNG or JPG
Opens in your browser. The file is never uploaded.
What Screenshot Studio boxes automatically
Cloud and platform keys
AWS access key IDs, Google API keys (AIza…), Stripe keys (sk_, pk_ and rk_, live and test) and Slack tokens.
GitHub tokens
Classic tokens (ghp_, gho_ and others) and fine-grained github_pat_ tokens.
Secrets in config and code
Values assigned to names like api_key, secret, password or token, AWS secret keys next to a key name, and private key headers.
Personal details
Email addresses, phone numbers, card numbers and names in the same screenshot.
How to hide secrets in a screenshot
- 1
Open Screenshot Studio (redactsnap.com/studio) and drop in the PNG or JPG.
- 2
Switch the style to Blackout. Blur is the default, and blurred keys can sometimes be recovered.
- 3
Check the boxes it added, and draw extra ones over anything it missed, such as internal hostnames or customer IDs.
- 4
Save the PNG and share that copy.
Already posted it? Rotate the key
Redacting a new copy doesn't help if the original has already been posted, pasted into a chat or attached to a ticket. Treat the key as leaked: revoke it, issue a new one and check the provider's logs for use you don't recognise.
Detection is a first pass, not a guarantee
Studio uses OCR, so tiny, low-contrast or stylised terminal fonts can be misread, and a key in an unusual format won't match any pattern. Zoom in and check before you share. The tool on this page also opens screenshots and finds emails, phone numbers and card numbers, but key detection is only in Studio.
Frequently asked questions
Is it safe to leave the first few characters of a key showing?
A prefix like sk_live_ or ghp_ only reveals the type of key, but the more of the key you show, the less work it takes to guess the rest. Cover the whole value.
Does it work on screenshots of dark-mode terminals?
Usually. OCR reads light-on-dark text, but very small fonts and heavy anti-aliasing reduce accuracy. Take the screenshot at a larger zoom level if detection misses something.
What file do I get back?
A PNG. The image is redrawn from pixels with your boxes burned in, so nothing under the boxes and none of the original file's metadata, such as EXIF GPS location, is carried over. If you need a PDF instead, there is a "Download as PDF instead" option.
Is my image uploaded anywhere?
No. The image is read by your browser and edited in memory on your device. There is no upload endpoint and no server-side copy. You can check this in your browser's network tab while you redact.