PII & Secret Redactor

Mask emails, phones, SSNs, cards & API keys before sharing — all in your browser.

Free PII redaction tool that masks emails, phones, SSNs, cards & API keys before you share text. Redact sensitive data right in your browser — no upload, no…

About PII & Secret Redactor

PII & Secret Redactor is a free, browser-based tool that scans pasted text and masks sensitive items — emails, URLs, API keys, SSNs, credit cards, IPv4 addresses, phone numbers, dollar amounts, and dates — replacing each with a bracketed label like [EMAIL] or [API_KEY]. Detection uses deterministic regex pattern-matching (no AI), with extra checks like a Luhn checksum so only valid card numbers are masked. Use it to scrub sensitive data before pasting into a chatbot, a support ticket, or a log. Everything runs locally in your browser — nothing is uploaded and there is no signup.

How to use PII & Secret Redactor

  1. Paste the text you want to clean into the 'Your text' box (or click 'Sample' to load an example with an email, phone, SSN, card, and API key).
  2. Under 'What to mask', toggle the entity chips on or off — Email, URL, API key, SSN, Card, IP, Phone, Money, and Date are all enabled by default.
  3. Watch the redacted output update live as you type; sensitive matches are replaced with bracketed labels like [PHONE] or [CARD].
  4. Review the counts panel showing how many of each type were masked (e.g. 'Masked 4 items').
  5. Click 'Copy' to put the redacted text on your clipboard, or 'Download' to save it as redacted.txt.

Frequently asked questions

Is any of my text uploaded to a server?
No. All redaction runs entirely in your browser using local regex pattern-matching — your text never leaves the page and nothing is uploaded.
Is it free and do I need an account?
Yes, it's completely free with no signup, account, or watermark.
What types of sensitive data can it detect?
Nine entity types: emails, URLs, API keys, SSNs, credit cards, IPv4 addresses, phone numbers, dollar amounts, and dates. You can toggle each one on or off independently.
Which API keys and secrets does it recognize?
It matches common key formats including OpenAI-style sk- keys, AWS AKIA keys, GitHub tokens (ghp_/gho_ etc.), Google AIza keys, Slack xox- tokens, and JWTs (eyJ... three-part tokens).
Does it avoid masking random numbers as credit cards?
Yes. Card matches are validated with a Luhn checksum, and dates are checked for a plausible month/day, so version strings, IDs, or impossible dates like 13/32/2026 aren't masked by mistake.
How is the sensitive data replaced — can I recover the original?
Each match is swapped for a fixed bracketed label such as [EMAIL] or [SSN]. The masking is one-way, so the original values cannot be reconstructed from the redacted output.

People also search for

PII & Secret Redactor is also known as pii redaction tool, redact sensitive data online, mask emails and api keys, remove personal information from text, anonymize text before sharing, scrub secrets and credit cards, what is pii redaction.