Sensitive Data Detector
Scan JSON (or any text) for common PII and secrets — emails, JWTs, API keys, credit cards, IP addresses, phone numbers and sensitive key names. Switch to Redact to get a cleaned copy. All scanning happens locally in your browser.
Frequently asked questions
Is my data uploaded?
No. Detection and redaction run entirely in your browser — nothing is transmitted or stored.
Can it catch everything?
No detector is perfect. This uses pattern matching for common secret and PII formats and flags suspicious key names, but always review results before sharing data.