SecretSifter: Credentials & Secrets Scanner

Name: SecretSifter: Credentials & Secrets Scanner
Author: SecretSifter

By: SecretSifter

Detects secrets, API keys, and tokens in JS, JSON, XML, and HTML at runtime

Download

Install

Features & Capabilities

SecretSifter is a security tool for pentesters and developers that automatically detects exposed secrets, API keys, tokens, and credentials in real time.

Features: • Scans JavaScript, JSON, XML, and HTML responses as they load • Intercepts XHR, fetch, and WebSocket traffic via network hooks • Detects 80+ secret types: AWS keys, JWT tokens, GitHub tokens, Stripe keys, Google API keys, private keys, and more • DevTools panel with live findings table, severity classification, and source URL • Export findings as CSV or JSON • Download full list of scanned URLs • Per-domain on/off toggle — only scans sites you enable • All processing is local; no data leaves the browser

User Growth & Download Statistics

Add-on

By:

SecretSifter

Daily users:

Version:

1.0.0 Last updated: 2026-03-17

Version code:

6181445

Creation date:

2026-03-14

Risk:

Permissions:

Host permissions:

<all_urls>

Content scripts matches:

<all_urls>

Size:

78.77KB

URLs:

Full description:

Source:

Firefox Add-ons Store

Data ingested on:

2026-06-03

Compare stats and ranking:

Ranking

# 45,811 ▼ 168

Other rankings

#173 in etsy keyword 38 ▲ 6

For Developers

Monetize with App Pass Boost with Extension Booster

Contact the developer

Chrome-Stats does not own this Firefox add-on. Please use these information below to contact the Firefox add-on developer.

Developed by:

SecretSifter

Firefox Add-ons Store

https://addons.mozilla.org/firefox/addon/secretsifter-extension/

Is SecretSifter: Credentials & Secrets Scanner Safe?

Risk impact

Risk impact measures the level of extra permissions an extension has access to. A low risk impact extension cannot do much harms, whereas a high risk impact extension can do a lot of damage like stealing your password, bypassing your security settings, and accessing your personal data. High risk impact extensions are not necessarily malicious. However, if they do turn malicious, they can be very harmful.

SecretSifter: Credentials & Secrets Scanner requires some sensitive permissions that could impact your browser and data security. Exercise caution before installing.

Risk impact analysis details

Critical Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
Critical ****** ****** ** *** ********* ****** * *********** ******** **** ** ** *** ******* *** ****** **** **** *** ******* *****
High ****** *** ********* ** ******* *** ******* ******* ** ****** *** *** ******** ******
High ******* ******* **** *** ****** ***** *** ***** ** ******* **** ********* ********* ** * *********** *****
Medium ****** ** ********* ****** ********* *** **** ****** **** **** ** ******* ** ********** **** ***********

Risk likelihood

Risk likelihood measures the probability that a Firefox add-on may turn malicious. This is determined by the publisher and the Firefox add-on reputation on Firefox Add-ons Store, the amount of time the Firefox add-on has been around, and other signals about the Firefox add-on. Our algorithms are not perfect, and are subject to change as we discover new ways to detect malicious extensions. We recommend that you always exercise caution when installing a Firefox add-on.

SecretSifter: Credentials & Secrets Scanner is recently added, and hasn't been around long enough for us to gather enough data to accurately assess its risk level.

Risk likelihood analysis details

High This extension has low user count. Unpopular extensions may not be stable or safe.
Medium **** ********* *** ******* ** *** **** * ******* *** ******* *** *** ** ****** ** *****
Medium **** ********* *** ***** ** *** **** * ******* *** ********** *** *** ** ****** ** *****