JSON Anonymizer & PII Redactor

How JSON PII redaction works

This tool walks every key and value in your JSON document and flags likely personal data using two detection passes: a key-name pass that matches field names like email, ssn, or creditCard against common naming conventions, and a value-shape pass that scans free-text strings for embedded patterns — email addresses, phone numbers, US Social Security numbers, IPv4 addresses, and credit card numbers (verified with a Luhn checksum to avoid false positives on plain digit strings). Matches can be handled three ways: masked with block characters while preserving the first character and rough length, replaced with a realistic-looking placeholder value, or one-way hashed with SHA-256 so the same input always redacts to the same token (useful for keeping referential integrity across a dataset while removing the real value), or the key can be removed from the object entirely. Everything runs locally in your browser — the JSON you paste is never uploaded anywhere, which matters since the whole point of the tool is handling sensitive data safely.