Filename & Path Sanitizer
De-fingerprint filenames before you share.
Runs entirely in your browser — nothing you enter is uploaded, logged, or tracked.
A filename like "Q3_budget_jsmith_DRAFT_v3.xlsx" quietly leaks an author, a status, and a version before anyone opens it. Paste a list of names — or drop the actual files — and this tool flags the risky tokens (personal names, usernames, DRAFT/FINAL/CONFIDENTIAL, dates, version tags, sequential IDs and client names) and rewrites them with a clean, random, or sequential scheme. Everything happens in your browser; the file bytes never leave the page, and you can download the renamed copies as a single file or a zip.
| Original | Flagged | Sanitized |
|---|
Frequently asked questions
What kinds of tokens does it flag?
Personal names and username patterns (e.g. jsmith, rjones), status/label words (DRAFT, FINAL, CONFIDENTIAL, INTERNAL, signed…), years and dates (2023, 20231004, 6-digit dates/IDs), month names, version tags (v3, rev2, r1), bare sequential IDs, long hex/unique IDs, and email addresses. You can also supply your own comma-separated words — client or project codenames — to flag and strip.
Is anything uploaded?
No. The tool is 100% client-side. When you drop files it reads only what it needs in your browser to rename them — the file contents are never sent anywhere, and there are no network calls or third-party scripts. If you only paste a list of names, no files are touched at all.
How does the 'Clean' rename scheme work?
It removes only the tokens it flagged as risky, keeps the rest, collapses any separators left dangling, optionally lower-cases the result, and keeps the original extension. If every token in a name was risky, it falls back to your chosen base name (default 'document') so you never end up with an empty filename. The 'Random' scheme replaces the whole name with base-<random hex> (generated with the browser's crypto RNG), and 'Sequential' uses base-001, base-002, and so on.
Can I rename a batch of real files at once?
Yes. Drop multiple files and the tool renames each one according to your scheme, de-duplicates any name collisions, and lets you download them all as a single .zip (built locally with the fflate library). Drop one file and you get a single renamed download instead. You can also just copy the sanitized list of names as text.
Is the flagging perfect?
No — it's a heuristic, and it's honest about that. It uses a pragmatic dictionary of common given names, surnames and label words, so it can miss an unusual name or flag a coincidental match (for example a real word that happens to look like a status). Always review the original-to-sanitized table before sharing, and add any client or project names you want stripped in the extra-words box.