Rashid Secret Blur

Record, stream or share your screen without leaking your API keys.

Secret Blur hides secrets in the editor as you type: .env values, API keys, tokens and passwords are blurred (or covered with a bar) while the code around them stays readable. Your files are never changed. Only how they look on screen.

What gets hidden

• Every value in .env files: .env, .env.local, .env.production and so on. Keys stay visible, values are hidden.
• Known key formats, in any file: OpenAI and Anthropic keys, GitHub tokens, AWS access keys, Stripe secret keys, Google API keys, Slack tokens, Telegram bot tokens, SendGrid keys, JWTs and private key blocks.
• Passwords in URLs: the p4ss in mongodb://user:p4ss@host.
• Secret-looking assignments: values given to names like apiKey, secret, token, password or client_secret. Variable references like password = userInput or process.env.KEY are left alone.
• Your own patterns via customPatterns.

Turning it on and off

Click the eye in the status bar, or run Secret Blur: Toggle Hiding Secrets from the Command Palette. When secrets are visible, the status bar item turns yellow so you don't forget before you hit record.

Settings

Example custom pattern that hides Iraqi mobile numbers:

"rashidSecretBlur.customPatterns": ["\\b07[5-9]\\d[ -]?\\d{3}[ -]?\\d{4}\\b"]

Good to know

Secret Blur hides text in the editor only. Hovers, the terminal, search results and other panels still show the real text, so keep those closed while recording. Always double-check before you publish.

Made by Rashid Farhad.