JSON Anonymizer & PII Masking
Securely mask sensitive information like Emails, Phone Numbers, and Credit Cards from your JSON data.
About the PII Anonymizer
Mask personal data in JSON before you share it in a bug report, a demo or a support ticket. Everything runs in your browser.
- Paste your JSON into input.json.
- Choose what to mask: emails, phone numbers and/or card numbers.
- Click Anonymize; the masked copy appears in anonymized.json.
- Copy the result, or use the full-window button to review large documents.
- The structure and keys stay the same, so the masked JSON still works in tests and repro steps.
- Masking is pattern-based - review the output before sharing, especially free-text fields such as notes.
- Nothing is uploaded: the data never leaves this page.
Mask Personal Data in JSON
Paste JSON and get a copy in which email addresses, phone numbers and card numbers are replaced with placeholders. Keys and structure are untouched, so the masked document still works wherever the original did.
What gets masked
- Email addresses become
***@***.***. - Phone numbers in North American 10-digit formats, with or without
+1, become(***) ***-****. - Card numbers: runs of 13 to 16 digits, with or without spaces or dashes, become
****-****-****-****. - Scope: only text values are scanned, anywhere in the document, including inside longer sentences. Keys and numeric values are left as they are.
When to anonymize JSON
- Attaching a payload to a bug report or support ticket
- Preparing screenshots and demos from real data
- Building test fixtures from production samples
- Pasting data into third-party tools or AI assistants
JSON Anonymizer FAQ
Does it detect names and addresses?
No. It recognises patterns - emails, phone numbers and card numbers. Names, street addresses and IDs have no fixed pattern, so remove or replace those yourself.
Why wasn't a phone or card number masked?
Two common reasons: the value is stored as a JSON number and not as text, or the phone number is in an international format other than the North American one. Check the output before sharing it.
Is masked JSON safe to share under GDPR or similar rules?
Treat the tool as a helper, not a guarantee. It removes the most common identifiers, but other fields can still identify a person. Review the result against your own policy.
Is my data uploaded to a server?
No. Masking runs entirely in your browser; nothing leaves this page.