Guides / Screenshot privacy

Redact sensitive info in screenshots — without uploading them

Screenshot redaction is the process of permanently masking sensitive regions — API keys, passwords, customer emails, account IDs, and internal URLs — before an image leaves your browser. Unlike cropping, which removes surrounding context, redaction covers only the sensitive area while keeping the rest of the screenshot intact. There are three methods in FramedShot: blur softens low-risk details like names and generic labels; pixelate gives an obvious "intentionally hidden" signal for technical screenshots shared with developers or QA teams; solid fill provides maximum coverage for credentials like tokens, passwords, and API keys where even partial pixel visibility is a security risk. All three methods run locally in Chrome — your screenshot is never uploaded to an external server during editing, annotation, or export.

Hide API keys, customer emails, names, account IDs, and internal URLs before the image goes to Jira, Slack, or a doc. FramedShot runs in Chrome; you mask pixels locally and export — no separate photo app and no upload-to-edit step.

Updated April 11, 2026 8 min read Docs, support, QA, and product teams

Ready to mask now? Open the free Chrome redaction tool. Picking a masking style? When to use blur vs pixelate vs solid fill.

Proof

Same capture — before and after redaction

Illustrative example (fake data). The “before” side shows what often slips into tickets and Slack; the “after” side is what you export from FramedShot.

Before: fake API key, customer email, ticket ID, and staging URL visible in a dashboard. After: the same regions blurred, pixelated, or solid-filled.
Redaction hides pixels in the image — not a decorative overlay. Review at full export size before you attach to Jira, Slack, Notion, or email.
Examples shown: sk_live_…, jane@acmecorp.com, #SUP-20481, staging.internal

At a glance

  • Redaction means masking pixels so text is not readable in the exported PNG — FramedShot uses blur, pixelate, and solid fill in the Annotations tab’s privacy tools, not a loose brush.
  • Local edit: masking runs in your Chrome tab; you are not uploading the file to FramedShot to edit it.
  • Before share: redact, then export — then paste into Slack, tickets, or docs.

What people actually redact

Same screenshot problem, different roles. Scan for your fields before the image leaves the browser.

Developers

  • API keys, JWTs, OAuth client secrets
  • Authorization headers, cookie values
  • Env vars, connection strings, stack traces with paths

QA & support

  • Customer emails, names, phone numbers
  • Ticket IDs (e.g. #ACME-44821), account IDs
  • Order totals, internal case notes in side panels

Product & docs

  • Internal URLs, staging hostnames, admin paths
  • Unreleased UI, feature flags, roadmap labels
  • Analytics counts, revenue snippets, cohort labels

Also check the edges: tabs, address bar (tokens in query strings), profile name, and notification badges — not only the center panel.

Pick a concealment method on purpose

Match the tool to risk. For field-by-field tradeoffs, see when to use blur vs pixelate vs solid fill — here is the short version:

Blur

When it is enough

Lower-risk context where the UI should still look natural — names, secondary labels, soft background detail. Not for secrets.

Pixelate

When obvious masking helps

Bug reports, QA, internal threads: readers should see that something was intentionally hidden, not cropped away by accident.

Solid fill

When in doubt

API keys, tokens, passwords, anything short and monospace. Flat coverage beats recoverable blur after JPEG or zoom.

Redact in the browser — then share

Typical slip: upload a sensitive screenshot to a random online editor just to blur a field. That copies your image to another system before it is safe.

  • Mask in FramedShot before Slack, Jira, Linear, Notion, Google Docs, or customer email — not after.
  • Editing stays in your Chrome tab until you export; you are not sending the image to FramedShot’s servers to apply redaction.
  • Export the cleaned PNG, then attach. One less place the unredacted file had to exist.

Local-first privacy — how capture and edits stay in the browser.

API keys, tokens, and developer-facing captures

Secrets need solid fill or pixelate more often than blur. They hide in the network panel, terminal, URL bar, and settings — not only form fields. See redacting API keys, tokens, and passwords in screenshots for a credential-focused checklist.

Workflow in FramedShot

Sidebar: open the editor from the extension → Annotations tab → privacy / redaction tools (blur, pixelate, solid fill).

  1. Capture or import

    Capture a tab or region, or upload an existing PNG/JPEG into the editor.

    Popup · Visible tab · Area selection · Upload
  2. Choose a method per region

    Select blur, pixelate, or solid fill, then drag rectangles over each sensitive area. Switch tools if different fields need different risk levels.

  3. Mask completely

    Extend slightly past the edge of monospace secrets and long emails. Zoom the canvas if needed.

  4. Export, then share

    Use or export and spot-check at full size. Download, then attach to a ticket or chat. Add frames or social sizes only after redaction.

    Social export: screenshot sizes guide

Best practices for technical screenshots

  • Do not over-redact. Hide only what is sensitive so tutorials and bug reports stay understandable.
  • Be consistent. Use one style per sensitivity level in a single doc so readers know what “hidden” means.
  • Layer annotations after masking. Use arrows and text after redaction so callouts do not cover half-hidden data.
  • Redact before styling. Privacy first; mockups second.

Pre-publish checklist

FAQ

What is the difference between blur, pixelate, and solid fill?

Blur softens visually — often for lower-risk details. Pixelate reads as intentional masking in technical contexts. Solid fill is strongest for secrets. See when to use blur vs pixelate vs solid fill for a full comparison.

Does FramedShot upload my screenshot when I redact it?

No. Edits run locally in your browser tab. See local-first privacy for detail.

Should I redact before or after styling?

Always redact first. Add backgrounds, frames, and shadows after sensitive pixels are masked.

Redact in Chrome, export when it is safe

Capture or upload, mask sensitive pixels in the editor, then download — same tab, no upload for the edit step.

Redaction is processed in your browser — mask before you share; no upload required to edit the image.

Open the screenshot redaction tool

Or install FramedShot free from the Chrome Web Store