Prompt Sanitizer
Remove emails, phones, API keys and URLs from prompts before sharing
About Prompt Sanitizer
Replaces emails, phone numbers, http(s) URLs and API keys in pasted text with placeholders such as [EMAIL], [PHONE], [URL] and [API_KEY], and reports how many of each it removed. Each category has its own toggle. Matching is regex-based and imperfect both ways: many phone formats slip through, while long numbers such as millisecond timestamps or 40-character commit hashes can get masked.
Category: AI Tools.
Frequently asked questions
What types of sensitive data does this tool detect?
▾
Four categories: email addresses, phone numbers, http/https URLs and API keys. The key patterns cover OpenAI and Anthropic keys that start with sk-, GitHub and GitLab tokens, Slack xox tokens, AWS access key IDs (AKIA…), Google AIza keys, Bearer tokens and lowercase hex strings of 32 or more characters.
Why wasn't my API key or phone number detected?
▾
Only the built-in patterns are matched. Stripe keys such as sk_live_…, AWS secret access keys, uppercase hex and plain UUIDs aren't recognized as keys, and the phone pattern misses common formats like 555-123-4567 or (555) 123-4567 and can leave a digit or two unmasked. Always review the sanitized output before sharing — this tool is a helper, not a guarantee.
Is it safe to paste sensitive data here?
▾
Yes. All processing runs entirely in your browser using JavaScript, and no text is ever sent to a server, stored, or logged. You can verify this by checking the browser's network tab — there are zero outgoing requests when you type.
Can I turn off specific detection types?
▾
Yes. Use the toggle pills at the top (Emails, Phones, URLs, API Keys) to enable or disable each category individually before sanitizing.