PII Redactor
Scan text for emails, phone numbers, credit cards, SSNs, IBANs, IP addresses, credentials, and API keys.
Loading tool...
What is PII Redactor?
PII Redactor scans pasted text for personally identifiable and sensitive information — emails, phone numbers, credit cards, SSNs, IBANs, IP addresses, inline credentials, and common API key formats — and replaces them with placeholders, masks, or deterministic pseudonyms entirely in your browser.
Key Benefits
- Safe sharing
- Leak prevention
- GDPR/PDPA friendly
- Fully offline
Common Use Cases
- •Redacting logs
- •Support tickets
- •AI prompt hygiene
- •Data minimization
How to Use the PII Redactor
- Paste your text: Paste logs, support tickets, chat transcripts, or documents into the input box.
- Choose what to detect: Toggle detector categories on or off — emails, phones, cards, SSNs, IBANs, IPs, credentials, and API keys.
- Pick a replacement mode: Use Redact for labeled placeholders, Mask to keep first/last characters, or Hash for deterministic pseudonyms.
- Copy or download: Review the detection summary, then copy or download the redacted output.
Key Features
- 8 detector categories: emails, phones, credit cards, SSNs, IBANs, IPv4, credentials, and API keys
- Luhn validation so only real card-shaped numbers are redacted
- Three modes: labeled placeholders, partial masking, and deterministic pseudonym hashing
- Live per-category counts as you type
- 100% offline — detection never leaves your browser
Frequently Asked Questions
Is my text uploaded anywhere?
No. All detection and redaction runs locally in your browser using regular expressions and Luhn validation. Nothing is sent to any server.
What is the difference between Redact, Mask, and Hash modes?
Redact replaces matches with a labeled placeholder like [EMAIL]. Mask keeps the first and last characters (ja*****om). Hash replaces matches with a deterministic pseudonym such as [EMAIL:#1a2b3c4d], so identical values always map to the same token and can still be correlated.
Will it catch every credit-card-shaped number?
No — it only redacts digit groups of 13-19 digits that pass the Luhn checksum, which drastically reduces false positives on order IDs, timestamps, and other long numbers.
Which API key formats are detected?
AWS access key IDs (AKIA...), GitHub tokens (ghp_/gho_/ghu_...), Slack tokens (xoxb/xoxp/...), Google API keys (AIza...), and JWTs (eyJ header.payload.signature).