MyJSON
Editing

Redact (mask JWTs, emails, UUIDs, credit cards)

One-click toolbar action to mask sensitive data before sharing.

Redact button in the toolbar (next to the other document actions), or the command palette → "Redact secrets & PII".

What it does

Click Redact (toolbar) to scan the entire document and replace sensitive patterns with `<redacted:type>` tags. Masked patterns include JWTs, email addresses, UUIDs, IP addresses, credit-card numbers, and credential-keyed values (API keys, tokens, secrets). The original values are preserved only on the in-memory undo stack (Ctrl+Z) — they are never written to disk.

Editor showing a document full of secrets — email, API key, JWT, IP, card number, UUID
Before: a payload full of secrets — email, sk_live_… API key, JWT, IP, card number, UUID.

Privacy guarantee

Originals live only in RAM on the undo stack. When you share or download after redacting, the output contains only the masks. Reload the tab (or use session-only mode) to clear the undo history and forget the originals entirely.

TipRedact mutates the document in place but is undoable — press Ctrl+Z to bring the originals back. To forget them permanently, refresh the tab or turn on session-only mode first.
Same document after Redact — every sensitive value replaced with a redacted tag
After one click: every secret becomes <redacted:kind>. Ctrl+Z restores the originals from memory.

When to use

Before sharing a payload with a teammate, pasting sensitive data into chat, or downloading a file for external use. Session-only mode (status-bar toggle) offers an additional layer — paste secrets and they vanish on refresh even if you don't redact manually.

Examples

Mask a 500 response before sharing

An on-call dev needs to debug a 500 response, but it contains production tokens and customer emails.

  1. Paste the response into the editor.
  2. Click Redact in the toolbar (or open the Command Palette with Ctrl+P and run 'Redact secrets & PII').
  3. Tokens become `<redacted:jwt>`, emails `<redacted:email>`, API keys `<redacted:credential-value>`, cards `<redacted:credit-card>`.
  4. Copy or share the masked document. Press Ctrl+Z if you need the originals back.
Input (json)
{
  "user": "ada@example.com",
  "apiKey": "sk_live_4eC39HqLyjWDarjtT1zdp7dc",
  "card": "4111111111111111"
}
Output (json)
{
  "user": "<redacted:email>",
  "apiKey": "<redacted:credential-value>",
  "card": "<redacted:credit-card>"
}