Allowlist

Prevent false positives by adding trusted secrets to your allowlist.

How the Allowlist Works

When SecretPaste detects a secret you know is safe, you can add it to your allowlist. Future pastes of that exact secret won't trigger a warning.

Common Use Cases

• Public API keys that are meant to be shared
• Example keys used in documentation
• Test credentials for development
• Keys you frequently paste intentionally

Adding to Allowlist

From the Warning Modal

When a secret is detected, click "Allow" in the warning modal. The secret is securely hashed and stored — we never save the actual secret value.

Paste detected→Click "Allow"→Added to allowlist

Managing Your Allowlist

Viewing Entries

The number of allowlist entries is shown in the SecretPaste popup. For privacy, you can't view the actual secrets — only the count.

Clearing Allowlist

To start fresh, click "Clear Allowlist" in the popup. This removes all entries and resets detection for all previously allowed secrets.

Security Note

Only add secrets to your allowlist if you're certain they're safe to share. When in doubt, use the "Mask" option instead to redact the secret before pasting.