Share a .env file without sharing its secrets

A .env file is almost all secrets, but when a deploy breaks someone still needs to see which variables exist. ScrubLogs keeps every variable name and replaces each value that looks like a credential with a placeholder such as <SECRET_1>.

Runs 100% in your browser. Nothing is uploaded.

What usually leaks

Cloud keys: AWS, Google, Stripe, OpenAI, Anthropic, Slack and more
Passwords inside DATABASE_URL and REDIS_URL
Signing secrets such as JWT_SECRET and SESSION_SECRET
Admin emails and internal hostnames

Tips

Harmless settings such as NODE_ENV or PORT are left alone, so the file still shows how the app is configured.
If a value was ever committed to git or pasted anywhere public, rotate it. Redacting a copy does not un-leak the original.

Other presets