Native macOS Menu Bar App
Before that secret leaves your laptop.
Secret leaks from developer machines are mostly accidents: an inline export sitting in .zsh_history, an un-gitignored .env file in a new repo, a live token copied to the clipboard. RedactBar catches them first.
macOS 14 (Sonoma) or later • 14-day unrestricted trial • No account required
RedactBar
No tracking, no crash reports, no account wall. Every regex matcher and Shannon entropy heuristic runs purely in local Swift code; the only network requests are a license check and an update check that carries the app version and license state.
Lightweight changeCount polling and lazy disk indexes. RedactBar sits quietly in your menu bar without burning CPU or battery.
Built for developer machines. Signed with Apple Developer ID, hardened runtime, and notarized. No sandbox handcuffs.
Clipboard Watcher
Catch keys before they hit Slack or the browser.
When you copy an AWS access key, Stripe secret, GitHub PAT, or private key block, RedactBar fires a discreet notification with instant actions: Clear Clipboard, Copy Masked, or Ignore.
Turn on optional 30-second auto-clear so sensitive tokens don't linger on your clipboard all afternoon.
AKIA••••••••MPLE was placed on the clipboard. Auto-clear in 30s.
Shell History Scrubber
Clean inline exports out of .zsh_history and .bash_history.
We've all typed export GITHUB_TOKEN=ghp_... or curl -H "Authorization: Bearer sk-..." directly into our shell. That command sits in plain text in ~/.zsh_history forever.
RedactBar parses your shell history files, highlights lines containing credentials, and removes selected lines cleanly with an automatic .bak safety backup.
.env File Inventory
Audit environment files and flag un-gitignored keys.
A git add . that catches an un-gitignored .env file is the number one cause of repo secret leaks. RedactBar crawls your project directories, lists all .env* files, and flags any file that isn't gitignored.
It also flags duplicate production credentials: alert when the same Stripe or Database key is copy-pasted across three different repositories.
Simple, Transparent Pricing
One-time purchase • Includes 12 months of updates • Keeps working forever
- ✓ Valid on up to 3 personal Macs
- ✓ All features included: Clipboard watch, History scrub, .env inventory
- ✓ 100% on-device detection, no tracking
- ✓ Optional $9/year renewal for updates after year one
- ✓ 14-day no-questions-asked money-back guarantee
Or get all nine Mac developer tools for $49.99 with the DevTools bundle.
Or download the 14-day free trial first. No account needed.
Frequently Asked Questions
Does RedactBar send my clipboard or secrets anywhere?
No. Never. RedactBar has no tracking: no identifiers, no usage events, no crash reports, no account. All pattern detection, regex matching, and entropy calculations occur locally in native Swift. The only network requests made are Polar license validation and a daily update check, which says only which version you have and whether it is in trial, licensed, trial ended, or needs attention. See the privacy page.
Why isn't RedactBar on the Mac App Store?
The Mac App Store sandbox prevents apps from monitoring pasteboard changes across applications and forbids reading files across multiple user directories (like ~/.zsh_history). RedactBar is distributed directly, signed with Developer ID, and notarized by Apple.
How does the 14-day trial work?
Download and launch the app. You get 14 days of completely unrestricted access to all features. No email, credit card, or account is required.
What happens after the 12-month update window?
Your installed copy of RedactBar continues to work forever. You are never forced to subscribe. If you want updates and new rule catalogs in subsequent years, you can renew for $9/year.