Why this tool exists
Work with the structure, not the noise.
Debug payloads can contain authentication headers, API keys, session identifiers and personal information. This tool walks the complete JSON tree and masks values whose keys or content match common sensitive patterns. Redaction happens locally and produces a separate copy.
Mask common password, token, secret and authorization keys
Optionally detect email and IP address values
Report every redacted JSON path
Preserve the original input for side-by-side review
How to use it
From payload to useful result.
Paste the payload locally
The document is processed only in this browser tab.
Select detection rules
Key-based secret detection is always applied; email and IP detection are optional.
Review every path
Automated detection is intentionally conservative. Check the result before posting it publicly.
Common questions
Before you use the output.
Does this guarantee all private data is removed?
No. Sensitive data may use unexpected keys or formats. Always perform a human review before sharing.
Is the original object modified?
No. The tool constructs a redacted copy and leaves the text in the input pane unchanged.