Log redactor

Mask emails, tokens, IPs, API keys, and Authorization headers before sharing logs.

Inputs stay in your browser. Rules mask common sensitive fragments and show counts, but manual review is still required before sharing.

Regex redaction can miss secrets; review before sharing.

How to use this tool

Mask emails, tokens, IPs, API keys, and Authorization headers before sharing logs.

Use local rules to mask matching emails, IPv4 addresses, Authorization and Bearer values, and selected key=value secrets before sharing logs. Results still require manual review.

💡 3 Quick Steps to Get Started

1. Paste Logs

Enter the text to review.

2. Apply Fixed Rules

The tool replaces matching fragments and reports replacement counts by category.

3. Review Before Copying

Check for missed names, passwords, or other sensitive content before deciding whether to share.

When it helps

Useful before support, issues, PRs, and AI collaboration.

How it works

Rules mask common sensitive fragments and show counts, but manual review is still required before sharing.

Worked example

Example: paste an error log and export a shareable version.

Limits and data handling

Rules cannot cover every secret format, so manual review is still required before sharing.

No. The Log redactor runs in the browser. Do not paste production secrets or unredacted personal data.

Log redactor guide

Workflow and limits

Local rules mask Authorization headers, Bearer tokens, emails, valid IPv4 and api_key=, token=, secret=. Output uses [token], [email], [ip] and [secret], with match counts and a download.

For example ada@example.com becomes [email]. password=, payment cards, national IDs, phone numbers and IPv6 are outside detection scope. Review before sharing; this is not complete anonymization or proof of regulatory compliance.

Authoritative Sources & Reference Standards

  • EU General Data Protection Regulation (GDPR) Text
  • PCI Security Standards Council: Protecting Cardholder Data
  • NIST Special Publication 800-122: Guide to Protecting PII

FAQ

What input does the Log redactor accept?

Paste log text to sanitize, without intentionally adding production secrets.

How does the Log redactor produce its result?

Built-in rules mask common email, IP, token, API-key, and Authorization fragments and show counts.

What are the Log redactor limitations?

Rules cannot cover every secret format, so manual review is still required before sharing.

Does the Log redactor upload data?

No. The Log redactor runs in the browser. Do not paste production secrets or unredacted personal data.