Go (RE2)

Stripe API Key in GO

Match Stripe API keys: secret (sk_), publishable (pk_), or restricted (rk_), in test or live mode.

Try it in the GO tester →

Pattern

regexGO
(?:sk|pk|rk)_(?:test|live)_[A-Za-z0-9]{24,}   (flags: g)

Go (RE2) code

goGo
package main

import (
	"fmt"
	"regexp"
)

func main() {
	re := regexp.MustCompile(`(?:sk|pk|rk)_(?:test|live)_[A-Za-z0-9]{24,}`)
	input := `Use sk_live_4eC39HqLyjWDarjtT1zdp7dc for prod`
	for _, match := range re.FindAllString(input, -1) {
		fmt.Println(match)
	}
}

Uses `regexp.MustCompile` (panics on bad patterns at startup) and `FindAllString` for all matches.

How the pattern works

(?:sk|pk|rk) matches one of the three key types. _(?:test|live)_ matches the mode separator. [A-Za-z0-9]{24,} matches the random suffix — Stripe's keys are at least 24 characters, sometimes longer for restricted keys. The pattern catches keys exposed in source code, logs, or chat transcripts.

Examples

Input

Use sk_live_4eC39HqLyjWDarjtT1zdp7dc for prod

Matches

  • sk_live_4eC39HqLyjWDarjtT1zdp7dc

Input

Public: pk_test_TYooMQauvdEDq54NiTphI7jx

Matches

  • pk_test_TYooMQauvdEDq54NiTphI7jx

Input

no keys here

No match

—

Same pattern, other engines

JavaScript / ECMAScript

Supported

See how this pattern looks (and behaves) in JavaScript's built-in RegExp.

Python (re)

Supported

See how this pattern looks (and behaves) in Python's stdlib `re` module.

← Back to Stripe API Key overview (all engines)