How to blur or redact sensitive info in a screenshot — safely

Before you share that screenshot, look closely. An email address in the corner, an API key in a config file, a customer name in a support ticket, the last four digits of a card — screenshots leak private data constantly, and once you've posted one, you can't un-post it.

The instinct is to blur the sensitive part. That's the right idea, but the way most people do it isn't as safe as it looks.

Why a soft blur isn't always safe

A gentle gaussian blur — the kind most editors apply by default — doesn't delete the information underneath. It spreads each pixel into its neighbours in a predictable, mathematical way. For large blocks of text that's usually fine, but for short, structured data like a PIN, a short code, or a license plate, that predictability is a weakness. Researchers have shown that lightly blurred or pixelated text can sometimes be partially reconstructed, because the blur preserved enough of the original pattern to work backwards from.

In other words: a subtle blur can look hidden to your eye while still being recoverable by software. If the data actually matters, you want a method that destroys the pixels, not one that just softens them.

The two methods that actually work

1. Heavy pixelation (mosaic)

Strong pixelation collapses a region into large, uniform blocks of colour. Done aggressively, there simply isn't enough surviving detail to reverse — the original characters are gone, replaced by flat squares. This looks intentional and still reads as "something was hidden here," which is often what you want.

2. A solid block

The most bulletproof option is also the simplest: cover the area with a solid, opaque rectangle. There's nothing underneath to recover because you've painted over it entirely. Use this for anything truly sensitive — credentials, financial details, personal identifiers.

A quick redaction checklist

• Redact before you crop, then double-check. Zoom in on the exported image to confirm nothing peeks out at the edges of your block.
• Don't forget the reflections. Browser tabs, autofill dropdowns, notification previews, and window titles often contain names and emails too.
• Flatten it. Export to a standard PNG or JPG. Never share a layered file where the redaction is a separate, removable layer.
• Prefer local tools. Uploading a screenshot full of private data to an online editor just to blur it is its own privacy risk. Use something that works on-device.

The bottom line

Blurring is fine for hiding faces or general context. But for anything a stranger could actually use — credentials, IDs, financial data — reach for heavy pixelation or a solid block, and always verify on the final exported image. A thirty-second check beats leaking a password to the internet.