fixaiprompt
Mask API Keys · 100% client-side

Mask API keys before they leak.

Paste a config file, an error message, a curl command, or a log line. FixAIPrompt finds every API key and replaces it with a safe placeholder. Works for AWS, OpenAI, Anthropic, GitHub, Stripe, Google, Slack, SendGrid, Twilio, and more — plus an entropy fallback for keys with unknown formats.
Before — risky
# .env
OPENAI_API_KEY=sk-proj-1QRSt2UvWxYz0abcdef123456ghij789klMnoPqr
ANTHROPIC_API_KEY=sk-ant-api03-aXz0AbCdEfGhIjKlMnOpQrStUvWxYzAbCdEfGhIjKlMnOpQrStUvWxYzAbCdEfGhIjKlMnOpQrStUvWxYzAbCdEfGhIjKlMnOpQrStUvWxYz
GITHUB_TOKEN=ghp_aBcDeFgHiJkLmNoPqRsTuVwXyZ012345abcd
AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
STRIPE_SECRET=sk_test_EXAMPLEEXAMPLEEXAMPLEEXAMPLEexample
GOOGLE_API_KEY=AIzaSyB1nDfVqYz8aBcDeFgHiJkLmNoPqRsTuVw
After — safe to paste
# .env
OPENAI_API_KEY=[OPENAI_API_KEY_MASKED]
ANTHROPIC_API_KEY=[ANTHROPIC_API_KEY_MASKED]
GITHUB_TOKEN=[GITHUB_TOKEN_MASKED]
AWS_ACCESS_KEY_ID=[AWS_ACCESS_KEY_MASKED]
AWS_SECRET_ACCESS_KEY=[AWS_SECRET_KEY_MASKED]
STRIPE_SECRET=[STRIPE_SECRET_MASKED]
GOOGLE_API_KEY=[GOOGLE_API_KEY_MASKED]

What you get