# PII scrubber — mask, hash or remove personal data, no upload

> Detect and scrub personal data — emails, phones, SSNs, cards, IPs — in tabular data by masking, SHA-256 hashing, or HMAC. Runs in your browser with no upload.

Detect emails, phone numbers, SSNs, card numbers, and IPs in tabular data and scrub them by masking, SHA-256 hashing, or HMAC with a local salt. Everything runs via Web Crypto in your browser, so the data has zero server contact.

Sharing a dataset for analysis or support usually means removing the personal data first — but pasting it into an online scrubber defeats the purpose. This tool finds identifiers and transforms them on your device, with a counts-only receipt so you can show what was changed without exposing the values.

Hashing and HMAC preserve the ability to join or count while removing the raw value; masking removes it outright. For a healthcare-specific pass, use the HIPAA checklist; to profile the data first, use the Data profiler.

## How to

1. **Add a file.** Drop the CSV, JSON, or Excel file to clean.
2. **Detect identifiers.** The tool flags emails, phones, SSNs, cards, and IPs.
3. **Choose a method.** Mask, hash with SHA-256, or HMAC with a local salt per field.
4. **Export.** Download the scrubbed data plus a counts-only audit receipt.

## FAQ

### What counts as PII here?

Common identifiers — email addresses, phone numbers, SSNs, credit-card numbers, and IP addresses — detected by pattern across your columns and cells.

### Should I mask or hash?

Mask when the value should be unreadable, hash (SHA-256) when you still need to match records, and HMAC with a salt when you want consistent pseudonyms that resist reversal.

### Is my data uploaded to scrub it?

No. Detection and hashing use Web Crypto on your device, so the sensitive rows never leave the browser — the whole point of scrubbing locally.


## Related tools

- [HIPAA checklist](https://www.safepaper.app/data/hipaa-check)
- [Schema profile](https://www.safepaper.app/data/profile)
- [De-identify](https://www.safepaper.app/docs/deidentify)
- [Row deduplicator](https://www.safepaper.app/data/dedupe)

---

Canonical HTML: https://www.safepaper.app/data/pii-scrub
Markdown: https://www.safepaper.app/data/pii-scrub.md

There is no upload endpoint — your files are processed in this browser tab. Open your network tab and check.