Tools › Entity types

Developer identifiers

Redact login credentials from text, JSON, and CSV

A username alone is low risk and a password alone is high risk; the pair is what lets someone sign in. Redactly reports the combined credential block when the text presents it as one.

Try it on the live API No signup. 2,000 characters, 20 runs per 10 minutes.
Output appears here.

How Redactly detects login credentials

  • Detected from a login or credentials cue, including inline User: and Pass: pairs inside the value.
  • Does not assume a separator: works for colons, equals signs, and plain prose.
  • A password the model also flags is reported separately as credential.password.

Why redact login credentials?

Credentials in a support thread are usable immediately, by anyone with access to that thread.

Example request

curl -X POST https://api.bitbanger.in/v1/redact \
  -H "X-API-Key: rdct_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{"text": "Login credentials — User: jdoe88 Pass: Spring2026", "style": "replace"}'

Every hit in the response carries entity, text, start, and end. The offsets index into the text you sent, so you can apply the redactions to your own copy of the document. The full response schema is in the API reference.

Questions

Does Redactly redact login credentials automatically?

Yes. Send text to the API and every detected type is redacted, including login credentials. To redact only this type, pass the value developer.login_credentials in the entities filter. No training or configuration is required.

What happens to login credentials after redaction?

With style set to replace, each match becomes [developer.login_credentials] — the entity type in square brackets. Setting style to mask replaces every character with a block character, and remove deletes the span entirely.

Related entity types

Redact login credentials in production

Get an API key and send your first request in a minute. Plans start at $24/month.

See pricing