Mosaic is the safer default
A weak blur can leave shapes or text partly readable. Mosaic starts strong, scales with each selected region and is baked into the exported pixels.
PRIVACY CANVAS · LOCAL ONLY
Hide the part you cannot share
Draw over faces, names, account numbers or keys. Every region stays editable until you bake a clean, metadata-free copy.
PRIVACY REVIEW
Draw and review private regions
Drag empty space to add a region. Drag a region to move it; use the corner handles to resize.
Redacted
BAKED PIXELS · NO SOURCE METADATA
Bake a safe copy
The image, regions and finished pixels stay in this browser. Export re-encodes the visible image and does not carry source metadata.
Inspect, move, resize, undo
Every box remains editable. Hold the original view to check coverage, then use the full-resolution before/after handoff for a stricter final review.
The visible copy leaves hidden data behind
The output is rendered from pixels rather than copied from the source container, so EXIF, GPS, comments and edit history are not carried into the redacted file.
Before you start
People redact screenshots to share a bug report, a receipt, a chat thread or a dashboard without handing over an address, a token or someone else's name. The thing worth knowing before you start is that most ways of hiding something in an image are reversible, and the ones that look most thorough are often the worst. This tool paints opaque pixels over the region and re-encodes, which is the version that holds.
What catches people out
Blur and pixelation are not redaction
Both preserve information in the remaining pixels, and for short predictable strings — a six-digit code, a licence plate, a name from a known list — a search over candidates can recover the original. This has happened often enough to have a name in the security literature. Cover the region opaquely instead.
Cropping the sensitive part out is safer than covering it
If the region sits at an edge, removing it entirely leaves nothing to recover and nothing to get wrong. Covering is for the case where the sensitive material is surrounded by content you need to keep.
Metadata survives what you paint over the pixels
A photo can carry GPS coordinates, a device serial, a capture time and sometimes a thumbnail of the unedited original. None of that is in the visible image, so covering a face changes none of it. Strip metadata as a separate step.