Privacy Null

Redact GitHub Tokens

Automatically detect and mask GitHub Personal Access Tokens and OAuth tokens.

Runs locally. Nothing uploaded.

Features

Detects Personal Access Tokens (ghp_...)
Detects OAuth tokens (gho_...)
Detects GitHub App user tokens (ghu_...)
Detects GitHub App server tokens (ghs_...)
Detects GitHub App refresh tokens (ghr_...)

Frequently Asked Questions

What GitHub token formats are detected?

We detect all modern GitHub token formats: ghp_ (PAT), gho_ (OAuth), ghu_ (user), ghs_ (server), and ghr_ (refresh).

What about classic tokens without prefix?

Older GitHub tokens without the prefix are detected by our generic token patterns in the full preset.