JSON redact keys

Client

List key names to mask—values become [REDACTED] everywhere those keys appear. Use before pasting payloads into tickets or chat.

Learn more: redacting keys

Walk objects and arrays; when a property name matches your list, replace its value with a fixed placeholder string.

Safety

This is a best-effort scrubber—not a guarantee of removing all secrets. Values inside strings or non-matching keys can still leak; review manually before sharing.

Redact keys

?

Matching is case-insensitive on object keys at every depth. Values are replaced with the string [REDACTED].

Nearby workflows on Toolcore

Common use cases

  • Mask tokens, passwords, and API keys in sample payloads before pasting into tickets, chats, or public gists.
  • Prepare log excerpts for screenshots where key names can stay visible but values must not.
  • Iterate on a key list until the remaining JSON is safe enough for external review.
  • Strip obvious credential fields from fixture JSON before committing examples to a repo or a shared design doc.

Common mistakes to avoid

  • Treating redaction as a security guarantee

    Values can leak in neighboring fields, URLs, or base64 blobs. Review the whole document and remove unrelated secrets.

  • Missing secrets stored under uncommon key names

    Add every variant you use (token, accessToken, bearer, apiKey). Case-insensitive matching helps but is not exhaustive.

  • Secrets embedded inside long strings

    Authorization headers, connection URIs, or serialized JWTs may live under generic keys like “message” or “detail.” Scan the text, not only well-named fields.

FAQ

Is redaction performed on your servers?

No. Matching and replacement happen locally in your browser.

Does redaction remove keys or only values?

Listed keys keep their names; values are replaced with a placeholder so structure remains readable.

Should I use this or the free-form paste redact helper?

This page targets JSON by key name. Use the paste redact flow on unstructured logs or prose when secrets are not in JSON fields.

Common search terms

Phrases people search for that match this tool. See the full long-tail keyword index.

  • redact json keys online
  • mask sensitive json fields

More tools

Related utilities you can open in another tab—mostly client-side.