# SecretSifter: Credentials & Secrets Scanner

> Detects secrets, API keys, and tokens in JS, JSON, XML, and HTML at runtime

Canonical page: [https://chrome-stats.com/d/secretsifter-extension](https://chrome-stats.com/d/secretsifter-extension)

## Overview

- **ID:** `secretsifter-extension`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** SecretSifter
- **Category:** web-development,privacy-security
- **Daily users:** 2
- **Weekly downloads:** 1
- **Version:** 1.0.0
- **Last updated:** 2026-03-17
- **First published:** 2026-03-14
- **Size:** 79 KB
- **Data as of:** 2026-09-14
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/secretsifter-extension/)
- **Privacy policy:** [https://addons.mozilla.org/firefox/addon/secretsifter-extension/privacy/](https://addons.mozilla.org/firefox/addon/secretsifter-extension/privacy/)

## Description

SecretSifter is a security tool for pentesters and developers that automatically detects exposed secrets, API keys, tokens, and credentials in real time.

Features:
• Scans JavaScript, JSON, XML, and HTML responses as they load
• Intercepts XHR, fetch, and WebSocket traffic via network hooks
• Detects 80+ secret types: AWS keys, JWT tokens, GitHub tokens, Stripe keys, Google API keys, private keys, and more
• DevTools panel with live findings table, severity classification, and source URL
• Export findings as CSV or JSON
• Download full list of scanned URLs
• Per-domain on/off toggle — only scans sites you enable
• All processing is local; no data leaves the browser

## Rankings

- #66,684 — Overall

## Permissions and access

### Permissions

- `webRequest`
- `webRequestBlocking`
- `webRequestFilterResponse`
- `tabs`
- `storage`
- `activeTab`
- `scripting`

### Host permissions

- `<all_urls>`

### Content script matches

- `<all_urls>`

## Safety

- **Risk impact:** High risk impact
- **Risk likelihood:** Moderate risk likelihood

### Analysis details

- Grants access to browser tabs, which can be used to track user browsing habits and history, presenting a privacy concern.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [Secret Scanner](https://chrome-stats.com/d/secretscanner) — 35 users
- [CredScanner](https://chrome-stats.com/d/credscanner) — 1 users
- [Secret Scanner](https://chrome-stats.com/d/secret_scanner) — 39 users
- [Tyre-Kicker-Security](https://chrome-stats.com/d/tyre-kicker-security) — 1 users
- [KeyFinder](https://chrome-stats.com/d/keyfinder-original) — 22 users
- [API Key Detector](https://chrome-stats.com/d/api-key-detector) — 47 users
- [Secret Scanner](https://chrome-stats.com/d/secret-scanner) — 2 users
- [Jsmon Security Analyzer — Web Security Inspector](https://chrome-stats.com/d/jsmon-extension) — 33 users
- [YetAnotherBrowserExtension](https://chrome-stats.com/d/yetanotherbrowserextension) — 1 users
- [JS Extractor](https://chrome-stats.com/d/js-extractor) — 33 users, 5.00 / 5
- [Credential Leak Finder](https://chrome-stats.com/d/credential-leak-finder) — 33 users
- [Copy-Safe Secrets](https://chrome-stats.com/d/copy-safe-secrets) — 1 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/secretsifter-extension)