ScreenShieldHide API keys and tokens during demos and livestreams
Updated October 21, 2026
A key shown for two seconds on a stream or in a recorded demo has to be treated as leaked. Rotating it is the right response, but not showing it in the first place is better. ScreenShield recognises keys and tokens in the browser and hides them while the page loads.
What ScreenShield recognises
- API keys from popular services, such as Stripe, OpenAI, Google, GitHub, Slack and AWS
- Access tokens, including Bearer tokens in docs and consoles
- JWTs
- Private keys, such as the start of a PEM block
- Database connection URLs that contain a password
- Secrets inside links, such as
?token=or&key=values - Other secrets next to labels like "password" or "secret"
- Your own patterns, as keywords or regular expressions
Detection runs on your computer. The keys are never uploaded anywhere.
Set it up once
- Install ScreenShield and start the free Pro trial from the popup.
- Open ScreenShield's settings. Under Automatic detection, keys, tokens, private keys, database URLs and secrets in links are hidden on every site by default.
- Add your own patterns under Your keywords, for example an internal key prefix. Use the test box to check a regular expression before you save it.
While you present or stream
- Presentation Mode turns on by itself when you share in a meeting app that runs in Chrome, and hides everything it knows about in every tab. For OBS, desktop apps and streaming tools, press Alt+Shift+M before you go live.
- Panic key: Alt+Shift+H hides the whole screen instantly if something unexpected comes up.
- Terminals and editors outside Chrome aren't covered. Keep secrets in environment variables there, and don't open .env files on stream.
Without Pro
On the free plan, blur key fields by hand before you share: choose Click to blur and click the key, or Blur similar for a list of keys. Your blurs are saved for each site, so a console you demo often stays covered.
If a key was shown anyway
Rotate it. Revoke the old key in the provider's dashboard and create a new one. Assume anything that appeared in a recording or stream has been seen.