JSON Sensitive Data Masker – Mask JSON Fields
Mask sensitive fields like emails, passwords, and API tokens in JSON data. Our free JSON Sensitive Data Masker makes it safe to share logs and API responses without exposing private information.
About JSON Sensitive Data Masker
Sharing logs or API responses for debugging often means exposing sensitive information. This tool masks passwords, tokens, emails, and phone numbers in your JSON data so you can safely share it with team members or support teams.
How it works
Define which field names should be masked by adding rules. The tool replaces values in those fields with asterisks. You can also enable automatic detection for emails and phone numbers.
The Show Last N option lets you reveal part of the masked value for context. For example, showing the last 4 characters of a token helps identify it without exposing the full secret.
When you'd use this
You need to share an API error log with support but it contains authentication tokens. Mask the sensitive fields first, then paste the sanitized log into your support ticket.
This tool masks based on field names and simple patterns. It won't detect sensitive data in arbitrarily named fields, so review the output to ensure all secrets are properly masked.
Questions
Which fields are masked by default?
Default rules mask fields named password, token, and secret. Add more rules for your specific field names like apiKey, authToken, or credentials.
How does email masking work?
When enabled, emails are partially masked showing the first character, asterisks for the middle, and the full domain. For example, j***[email protected].
Are nested fields masked?
Yes, the tool recursively processes all nested objects and arrays. Fields matching your rules are masked at any depth in the JSON structure.
Can I use a different mask character?
Yes, each rule has a mask character setting. Use asterisks, X's, or any single character that works for your use case.
Is the masking reversible?
No, masking is one-way for security. Keep your original JSON if you need the unmasked values later. The masked output cannot be restored.