Sensitive Data Scanner & Redactor

About this plugin

Stop sensitive data leaking out of your design files.Real customer details, API keys and internal links often end up in mockups: pasted from production, left in hidden layers, or forgotten in old frames. When the file is shared, presented or handed off, that data goes with it.Sensitive Data Scanner finds it in seconds, then replaces it with realistic fake data in one click.What it detects• API keys and tokens: AWS, GitHub, Stripe, Slack, Google, OpenAI and Anthropic• Private keys, JWTs and passwords• Payment card numbers (checksum-validated to cut false positives)• Bank account numbers (IBAN)• Government IDs: US SSN, Aadhaar, PAN• Email addresses and phone numbers• Internal, staging and localhost URLs• Your own keywords and patterns, such as product codenames (Pro)Why teams use it• Checks hidden layers. Hidden layers still ship with your file, so they're scanned and flagged.• Jumps to each finding. Click one to go to the layer and highlight the exact text.• Redacts in one click. Swap in realistic fake data ([email protected], 4242 4242 4242 4242) or bullet masks. Text styling is kept, and ⌘Z / Ctrl+Z undoes it.• Reports you can share. Export a PDF report, CSV or JSON for reviews and audits. Values are always masked.• Team-wide ignore list. Mark false positives as safe; the ignore list is saved in the file for everyone.Private by designThe plugin has no network access. Your designs never leave Figma, and nothing is sent to any server.Pricing• Free: your first scan (any page or the whole file), plus exports and the sample data.• Pro: unlimited scans, one-click and bulk redaction, and custom rules.Payments are handled securely by Figma.Try it in 10 secondsRun the plugin and click Try with sample data. It adds a frame of fictional sensitive data and scans it, without using your free scan.Note: the plugin scans text layers and layer names. It doesn't read text inside images or screenshots.