Free tool

Which of your keys ship to every visitor?

Paste your .env. Anything prefixed VITE_, NEXT_PUBLIC_ or EXPO_PUBLIC_ gets compiled into the JavaScript every stranger downloads. Some of those keys are meant to be public. Some drain your account.

This runs entirely in your browser. Nothing is uploaded, nothing is stored, nothing is logged. Open your network tab and watch: pasting here fires zero requests.