How many passwords are sitting in your Slack?

GitGuardian found that "About 28% of incidents originate entirely outside repositories, in places like Slack, Jira, and Confluence." So I built secret.tonytang.dev: paste a password, get a link that reveals it once, then the secret is gone for good. The demo in the video is a real run on the live site.

Try it: https://secret.tonytang.dev The code is public: https://github.com/tonytangdev/secret

Source: "The State of Secrets Sprawl 2026", GitGuardian, March 17, 2026 (Anna Nabiullina, Carole Winqwist) https://blog.gitguardian.com/the-state-of-secrets-sprawl-2026/

The parrot, the strangers, the server and the preview bot are dramatizations; every quote and number on screen is from the sources, and every screen of the tool is the live site.

Guilty? Comment one for yes, two for never.