Guides to masking secrets and PII

Practical guides for cleaning logs, HAR files, .env files and tokens before you share them, with code and command line alternatives, and an honest list of what PasteSafe does not catch.

Mask your log in PasteSafe

How to mask PII in logsEmails, IP addresses, card numbers and phone numbers pile up in logs. See what counts as PII, how to mask it in a log you have, and how to stop logging it.
How to mask sensitive data in logsRedact passwords, tokens and personal data in logs with pino, Python logging, Logback, Log4j 2 and Go slog, and clean up logs that already contain secrets.
How to sanitize logs before you share themBefore a log goes into a GitHub issue, ticket, chat or AI assistant, remove API keys, cookies and customer data. A checklist, an example and CLI options.
Is it safe to paste code and logs into ChatGPT?What happens to code and logs you paste into ChatGPT, what to take out first, and how to mask keys and customer data in your browser before you hit send.
What to do if you leaked an API keyRevoke or rotate the key first. Then check whether it was used, remove it from git, chat or logs, and stop the next leak. Steps for AWS, Stripe and GitHub.
How to remove a secret from git historyRotate the secret, find every commit that contains it, rewrite history with git filter-repo or BFG, and clean up forks, clones and pull request refs.
How to sanitize a HAR fileHAR files hold session cookies, tokens and passwords. See what Chrome's sanitized export removes, clean up with jq, and mask what is left in your browser.
How to mask credit card numbers in logs and textMask card numbers in logs and text: how to spot a PAN with the Luhn check, masking in JavaScript, Python and sed, and what PCI DSS says about display.
How to share .env files securelyShare .env values through a secrets manager, commit a .env.example, and mask credentials when you only need to show the file to an AI, an issue or support.
Is it safe to share a JWT token?A JWT works for whoever holds it until it expires, and anyone can read its payload. Learn where tokens leak, how to decode one locally and how to mask it.

Clean it before you paste it

PasteSafe masks API keys, passwords and personal data in your browser. Nothing is uploaded.

Mask your log in PasteSafe

Guides to masking secrets and PII

All guides

Clean it before you paste it