Tab Anonymizer

Right-click any editor tab to get an unsaved, deterministically anonymized duplicate.

Features

One Right-Click: Right-click any editor tab title and choose Anonymize & Duplicate Tab. Works on saved files and unsaved (Untitled-X) buffers alike.
Never Touches Your Source: The sanitized copy opens in a fresh, unsaved buffer that matches the source language mode and syntax highlighting. The original file on disk is never modified.
Deterministic & Consistent: Identical tokens map to identical surrogates within a session, so 192.167.2.1 becomes the same safe IP every time it appears — network paths and identifiers stay readable.
Secret & Key Redaction: JWTs, Bearer tokens, AWS keys (AKIA…), GitHub PATs (ghp_…), SSH/PEM private keys and credential-bearing database URIs are replaced with <redacted>.
Structured Anonymization: IPv4 / IPv6 / CIDR → RFC 1918 & unique-local ranges, emails → salted example.com handles, UUIDs, MAC addresses, Luhn-valid credit cards, SSNs and internal FQDNs.
Custom Keyword Dictionary: Configurable, case-preserving replacements applied inside larger identifiers (ew1condc01 → ew1abcdc01).

Usage

Open any file or unsaved buffer.
Right-click the editor tab title.
Select Anonymize & Duplicate Tab.

A new unsaved editor opens containing the sanitized text. The command is also available from the Command Palette (Cmd+Shift+P / Ctrl+Shift+P) as Anonymize & Duplicate Tab.

Configuration

All settings live under the tabAnonymizer.* namespace:

Setting	Type	Default	Description
`tabAnonymizer.customKeywords`	object	`{}`	Key → value replacements applied inside identifiers, preserving casing. e.g. `{ "CON": "ABC", "BEE": "DEF" }`.
`tabAnonymizer.redactSecrets`	boolean	`true`	Redact tokens, API keys, private keys and credential URIs with `<redacted>`.
`tabAnonymizer.anonymizeIPs`	boolean	`true`	Map IPv4 / IPv6 / CIDR to deterministic private surrogates.
`tabAnonymizer.anonymizeEmails`	boolean	`true`	Replace emails with salted handles at `example.com`.
`tabAnonymizer.anonymizeUUIDs`	boolean	`true`	Replace UUIDs / GUIDs with deterministic pseudo-UUIDs.
`tabAnonymizer.anonymizeMACs`	boolean	`true`	Replace MAC addresses with documentation MACs.
`tabAnonymizer.anonymizeCreditCards`	boolean	`true`	Mask Luhn-valid card numbers, keeping the last four digits.
`tabAnonymizer.anonymizeSSNs`	boolean	`true`	Mask US SSNs with a test placeholder.
`tabAnonymizer.anonymizeFQDNs`	boolean	`true`	Rewrite internal FQDN suffixes to a safe test domain.
`tabAnonymizer.internalDomainSuffixes`	string[]	`["corp.internal", "corp.local"]`	Internal domain suffixes to rewrite.
`tabAnonymizer.replacementDomainSuffix`	string	`example.internal`	Replacement suffix for matched internal FQDNs.

Example

// .vscode/settings.json
{
  "tabAnonymizer.customKeywords": {
    "CON": "ABC",
    "BEE": "DEF"
  }
}

ew1condc01 ➔ ew1abcdc01 · BEE_machine01 ➔ DEF_machine01

Requirements

VS Code ^1.85.0

Contributing

We welcome contributions! Please see our Contributing Guide for details on how to build, test, and submit pull requests.

License

This project is licensed under the MIT License.

Tab Anonymizer

knowlesy

Tab Anonymizer

Features

Usage

Configuration

Example

Requirements

Contributing

License