# Leaked Secret Guides: Revoke Any API Key Fast

> Leaked an API key, token or password? Pick the secret type for a step-by-step guide to revoke it, check for abuse and rotate it safely.

Source: https://leakwatch.net/secrets

---

[LeakWatch](/)

[Product](/product)[Live feed](/leaks)[Guides](/secrets)[Blog](/blog)[Free scan](/)

1.  [Home](/)
2.  Secrets

Secret guides

# Leaked secret guides

Found an API key, token or password in a public repository? Every provider has its own way to kill it, and the first hour decides how much damage follows. These guides give you the order of operations for each type of secret: where to revoke it at the provider, how to tell whether someone used it, what to harden afterwards, and how to clean up the repository last. Each guide is written for one provider, so you are not guessing which menu to open. LeakWatch detects these same secret types in public commits on GitHub, GitLab and Codeberg, and for many of them it checks whether the key is still active before reporting it. Every guide says plainly whether that live check exists for its type. Pick the one that matches what leaked; if you are not sure what is exposed, run a free scan of your account first.

29 guides18 checked live by LeakWatch

[Cloud6](#cat-Cloud)[AI6](#cat-AI)[Payments3](#cat-Payments)[Code & CI4](<#cat-Code & CI>)[Messaging7](#cat-Messaging)[Databases & keys3](<#cat-Databases & keys>)

## Cloud6

-   [Critical
    
    ### AWS access key
    
    AWSChecked live
    
    →](/secrets/aws-access-key)
-   [Critical
    
    ### Azure Client Secret
    
    AzureChecked live
    
    →](/secrets/azure-client-secret)
-   [Critical
    
    ### Terraform Cloud API Token
    
    HashiCorp TerraformDetected only
    
    →](/secrets/terraform-cloud-api-token)
-   [Critical
    
    ### DigitalOcean API Token
    
    DigitalOceanDetected only
    
    →](/secrets/digitalocean-token)
-   [Critical
    
    ### GCP Service Account Key
    
    Google CloudDetected only
    
    →](/secrets/gcp-service-account-key)
-   [High
    
    ### Cloudflare API Token / Key
    
    CloudflareDetected only
    
    →](/secrets/cloudflare-api-token)

## AI6

-   [High
    
    ### OpenAI API key
    
    OpenAIChecked live
    
    →](/secrets/openai-api-key)
-   [High
    
    ### Anthropic (Claude) API Key
    
    AnthropicChecked live
    
    →](/secrets/anthropic-api-key)
-   [High
    
    ### DeepSeek API Key
    
    DeepSeekChecked live
    
    →](/secrets/deepseek-api-key)
-   [High
    
    ### Groq API Key
    
    GroqChecked live
    
    →](/secrets/groq-api-key)
-   [High
    
    ### Hugging Face Access Token
    
    HuggingFaceChecked live
    
    →](/secrets/huggingface-access-token)
-   [High
    
    ### OpenRouter API Key
    
    OpenRouterChecked live
    
    →](/secrets/openrouter-api-key)

## Payments3

-   [Critical
    
    ### Stripe secret key
    
    StripeChecked live
    
    →](/secrets/stripe-secret-key)
-   [Critical
    
    ### Razorpay API Key
    
    RazorpayChecked live
    
    →](/secrets/razorpay-key)
-   [Critical
    
    ### Shopify Access Token
    
    ShopifyDetected only
    
    →](/secrets/shopify-access-token)

## Code & CI4

-   [Critical
    
    ### GitHub Personal Access Token
    
    GitHubChecked live
    
    →](/secrets/github-personal-access-token)
-   [Critical
    
    ### Docker Hub Access Token
    
    Docker HubDetected only
    
    →](/secrets/docker-hub-access-token)
-   [Critical
    
    ### GitLab Personal Access Token
    
    GitLabChecked live
    
    →](/secrets/gitlab-personal-access-token)
-   [Critical
    
    ### npm Access Token
    
    npmChecked live
    
    →](/secrets/npm-access-token)

## Messaging7

-   [High
    
    ### Telegram Bot Token
    
    TelegramChecked live
    
    →](/secrets/telegram-bot-token)
-   [High
    
    ### Discord Bot Token
    
    DiscordChecked live
    
    →](/secrets/discord-bot-token)
-   [High
    
    ### Mailgun API Key
    
    MailgunDetected only
    
    →](/secrets/mailgun-api-key)
-   [High
    
    ### SendGrid API Key
    
    SendGridDetected only
    
    →](/secrets/sendgrid-api-key)
-   [High
    
    ### Slack API Token
    
    SlackDetected only
    
    →](/secrets/slack-api-token)
-   [High
    
    ### Slack Webhook URL
    
    SlackDetected only
    
    →](/secrets/slack-webhook-url)
-   [Medium
    
    ### Twilio API Key
    
    TwilioDetected only
    
    →](/secrets/twilio-api-key)

## Databases & keys3

-   [Critical
    
    ### Database Connection String
    
    OtherChecked live
    
    →](/secrets/database-connection-string)
-   [High
    
    ### Google API Key
    
    GoogleChecked live
    
    →](/secrets/google-api-key)
-   [Critical
    
    ### Cloudinary API Secret
    
    CloudinaryChecked live
    
    →](/secrets/cloudinary-api-secret)

## Not sure what leaked?

Scan your GitHub, GitLab or Codeberg account and get the list of exposed secrets — free, in seconds.

[Run a free scan](/)

LeakWatch is not affiliated with the providers listed.

LeakWatch

Secrets leak into public commits every minute. This watches the forges for yours. Built and run by [Gabriel Diyan](/about), a cybersecurity student — [why LeakWatch exists](/about).

Scan

-   [Product](/product)
-   [Live feed](/leaks)
-   [Trends](/leaks/trends)
-   [API docs](/docs)
-   [CI/CD](/docs?tab=ci)

Read

-   [Blog](/blog)
-   [Secret guides](/secrets)
-   [Changelog](/changelog)
-   [About](/about)

Verify

-   [Security](/security)
-   [Privacy](/privacy)
-   [Terms](/terms)
-   [Legal](/legal)
-   [Contact](/contact)
-   [Status](https://status.leakwatch.net)

© 2026 LeakWatch

[GitHub](https://github.com/Leakwatch-Scan)[X](https://x.com/LeakwatchScan)