# Replit — New Workspace Features to Keep Your API Keys Safe

- Company: Replit (replit.com)
- Announced: 2023-08-16
- Category: capability-change
- Coverage: not counted
- Announcement: yes
- Group: announcements
- Source: https://replit.com/blog/secret-scanner
- Record: https://forck.live/items/18222-new-workspace-features-to-keep-your-api-keys-safe
- Subject: Replit Agent

Replit introduced a Secret Scanner that warns users when they paste a likely API key or token into a file and offers to store it as a Secret instead. The scanner runs client-side and uses known API key patterns and regexes. Since its initial launch, the feature has prevented more than 500 API keys and secrets from being exposed in open source code on Replit.com.

## Evidence

Verbatim from https://replit.com/blog/secret-scanner:

> When Replit detects that you're attempting to paste a likely secret value, like an API key or token, into a file, our Secret Scanner will warn you and give you the option to store that value as a Secret instead.

---

Record: https://forck.live/items/18222-new-workspace-features-to-keep-your-api-keys-safe
Catalogue: https://forck.live/llms.txt
Current issue: https://forck.live/feed.md