Turn it on
- In the session menu, choose Hide sensitive data. On iPhone and iPad it is under More.
- Data recognized as sensitive shows as a capsule: a key for secrets, a person for personal data.
- Always for this server turns it on by itself for every new session to that server.
An eye with a line through it on the tab says the mode is on. Copied text, search and the AI tools get a placeholder instead of a covered value.
What it covers
- Secrets, always: passwords and keys saved in your vault, API keys and tokens with a known format, values after names like PASSWORD, TOKEN or SECRET in .env, YAML, JSON and logs, Authorization headers and cookies, the password in a URL, private keys, and table columns such as password or api_key.
- Personal data and identifiers, on by default: emails, phone numbers, IP addresses, UUIDs, card numbers, IBANs and tax codes.
Turn the second level off in Settings, Terminal, Hide Sensitive Data. It also works in full screen programs and in database tables. Wardterm covers the data it recognizes: check the screen before you record or share.
Teach it
- A value that stays visible: select it and choose Hide this value. Wardterm suggests a rule, such as every value of DB_HOST, a table column or values that start the same way.
- A capsule over something harmless: tap it and choose Not sensitive.
Rules sync to all your devices through your encrypted vault. An exact value is never stored, only a fingerprint of it. See them in Learned rules, delete one, or choose Forget learned rules to start over.