New Workspace Features to Keep Your API Keys Safe

Replit introduced a Secret Scanner that warns users when they paste a likely API key or token into a file and offers to store it as a Secret instead.

The scanner runs client-side and uses known API key patterns and regexes.

Since its initial launch, the feature has prevented more than 500 API keys and secrets from being exposed in open source code on Replit.com.