Original
Sets all pictures at once; change one below if needed
Select any text (drag or double-click) to mask it
Masked preview
Click Transform to see the masked document here.
Runs entirely in your browser. Nothing is uploaded. Same value = same placeholder, e.g. [EMAIL_1].
Reads text, JSON, HAR, CSV, PDF, DOCX and XLSX files locally (reader libraries load on demand; your file never leaves the browser). PDF and Word files can be downloaded in their original layout, and images (PNG, JPG, WebP) can be masked with the box tool. Always review the result before sharing. Detection is best-effort; the name/address layer is heuristic (no ML model is loaded).
Log & HAR Sanitizer redacts passwords, API keys, JWTs, emails, IP addresses, card numbers and other sensitive data from HAR files, JSON and text logs before you share them with support or paste them into a ticket.
No. All processing happens locally in your browser. The file or pasted text is never sent to a server.
Secrets by key name and header (password, token, Authorization, Cookie), JWTs, cloud and payment API keys, emails, IP addresses, phone numbers, SSNs, IBANs, Luhn-valid card numbers, high-entropy strings, and heuristically detected names and street addresses.
When a value is identified as sensitive in a known location such as an Authorization header, every other exact occurrence of that value in the file is masked with the same placeholder.
Each unique sensitive value becomes a stable placeholder such as [EMAIL_1] or [SECRET_2], so the same value always maps to the same label and the log stays debuggable.