Scan based Design-for-Test is a powerful testing scheme, but it can be used to retrieve secrets stored inside a crypto device. In this paper we propose a novel scan based DFT architecture called secure scan that maintains the high test quality without compromising the security. Moreover our proposition is universal and can be easily implemented as an extension of the standard scan chain architecture. Apart from presenting our proposal we analyse its implementation complexity, test?s efficiency impact and gained security level.