Data Masker & Anonymizer
Paste text and we mask emails, phone numbers, credit cards, SSNs and IPs — perfect for sharing logs or bug reports.
Quick answer: Paste text and we mask emails, phone numbers, credit cards, SSNs and IPs — perfect for sharing logs or bug reports.
Last updated
Frequently asked questions
- What kinds of PII are detected?
- Email addresses, international and US-formatted phone numbers, US Social Security Numbers, IPv4 addresses and 13–19 digit credit card numbers (any spacing). The summary panel shows how many of each were found.
- Will this catch every piece of PII?
- No — regex-based detection has both false positives and false negatives. It catches the common, well-formatted patterns reliably; freeform addresses, names and dates of birth are out of scope. Always do a final visual review before sharing.
- Is anything uploaded?
- No. Detection and masking run in your browser. There is no API call, no logging and no telemetry on what you paste.
- Why is the credit card pattern run before the phone pattern?
- Because a 16-digit card number with spaces (4111 1111 1111 1111) also matches the broad phone-number pattern. Running the more specific detector first prevents the phone masker from chewing up card digits.
- Does masking preserve format for tools that parse the output?
- Roughly, yes. Masked emails keep the @domain so logs grouped by domain still group correctly; masked phones keep the last 4 digits; IPs keep their first three octets. Card numbers are fully redacted because they're high-risk.
- Can I add custom patterns?
- Not in this tool — for custom regex masking, drop the data into the Find & Replace tool and write your own pattern.
- Is this safe enough for a public bug report?
- It's a strong first pass. For a public posting (GitHub issue, blog post), combine with a manual review and consider also blurring screenshots.
- Does it work for non-US phones and SSNs?
- Phones: yes — the regex matches international formats with leading + and 7+ digits. SSNs: only US-style XXX-XX-XXXX. Other countries' national IDs would need their own patterns.
- Does it mask names or dates?
- No. Names have no reliable regex (they look like ordinary words), and dates are too ambiguous (calendar dates appear in normal prose). Both are out of scope for safe automatic masking.
- Is the masked text safe to log?
- Generally yes for the masked patterns. If your text contains other identifiers (account numbers, internal hostnames, document IDs), redact them manually or with the Find & Replace tool.