← All guides
Keep personal data out of what you share
EPIC masks personal data and removes credentials from what you save, export and copy.
- 1
Masking is on by default
Personal data is masked in screenshots, reports, exports and copied text. To change it, open the ⋯ menu at the top of the panel and use Redact personal data.
- 2
Credentials are always removed
Recognized passwords, session cookies, authorization headers and sign-in tokens are removed from exports and saved results, whatever the setting. The Full HAR is the one export that keeps them.
- 3
Signed links
When you save a website or journey whose address contains a sign-in token, EPIC removes the token unless you choose to keep the signed link.
- 4
When you need everything
Export Full HAR (sensitive) and Copy full request keep everything for your own debugging. EPIC asks you to confirm first.
Related guides
Free1 minEvery download in EPICWhere to find each export. Everything is generated in your browser and saved to your Downloads folder. EPIC masks the passwords, session cookies, sign-in tokens and authorization headers it recognizes in every export. Masking can't catch every app-specific secret, so review files before you share them.Observe + Reporting3 minInspect requests and export a HAREvery request from the Quick Scan, with filters, per-request detail and HAR/CSV export.