Remove an IP Address From a Screenshot
People hide the password line and leave the address that places them. An IP in a public post is a rough location, a network operator, and a target for scanning, all in four numbers.
Free, no account, and the image never leaves your browser.
What an address discloses that a username does not
A public IP resolves to an Internet service provider and a city, frequently to a neighborhood. Home connections sit in carrier-nat ranges where the address is tied to one subscriber with modest effort, which is why publishing it in a public thread is a different risk from publishing it in a private ticket.
The address is also a scanning target. An exposed host with a management interface, an open file share, or a rate-limited API gets probed by automated systems within hours of appearing somewhere indexable.
In the screenshots where this actually appears — a speed test, a server log, a router admin panel, a support forum reply — the IP usually shares the frame with a hostname, an account ID, or a session token. Each of those narrows the population from 'an address' to 'your address'.
What to cover on a page that shows an address
Addresses come in more shapes than people expect, and the versions in headers and logs are the easy ones to miss.
- The dotted-quad address itself
- Both the public/WAN line and the local/LAN line (192.168.x.x, 10.x.x.x, 172.16–31.x.x). A private address alone is low risk, but it reveals network layout.
- IPv6 values
- Long colon-separated addresses, often abbreviated with a double colon. They carry the same location exposure and are frequently left in the frame when only the IPv4 line is boxed.
- CIDR notation and subnets
- A /24 or /64 suffix describes an entire range, not one host. Cover the prefix and the length.
- Log lines with an embedded client address
- Server, proxy, and firewall logs repeat the source address per line. A single box over the first line leaves the rest readable.
- Hostnames and reverse DNS
- A resolved name such as an ISP dynamic-pool hostname is as identifying as the number, and often sits directly beside it.
- Timestamps and geolocation panels
- Speed-test and diagnostic tools print the city, coordinates, or a map next to the address. Covering only the number leaves the location visible.
What the built-in detection will and will not find
Auto-detect reads the text in the image in your browser and matches the dotted-quad shape, with a range check on each group of digits. It does not know IPv6 at all.
Found automatically
- Standard IPv4 quads such as 203.0.113.42 or 192.168.1.254, including ones inside a sentence
- Values followed by a port, such as 10.0.0.5:8080 — the address itself is flagged, so box the port too
- Several different addresses on one page, each as its own box
- Quads embedded in a log line where the digits sit at a comfortable size
Needs a box by hand
- Every IPv6 address. The matcher looks only at dot-separated groups, so a colon-separated value is never reported.
- A version number that happens to have four parts, such as 1.2.3.4. The matcher cannot tell a release string from an address, so both get flagged — read each box rather than trusting the count.
- Addresses written with spaces, dashes, or a broken line instead of dots.
- Hostname-only disclosures, proxy-obfuscated values such as 'for 127.0.0.1 via', and MAC addresses.
- Small, low-contrast digits in a dense log where the recognition pass misreads a 1 as an l or drops a row entirely.
Removing the address, step by step
Under a minute for one screenshot, with nothing stored between visits.
Load the screenshot
Drop it on the page, paste with Ctrl/Cmd+V, or choose a file. The image is decoded in the tab and never leaves it.
Run auto-detect as a first pass
It will usually catch the dotted-quad lines. It will catch none of the IPv6 values, so treat the reported count as a floor, not a total.
Box the whole value plus any suffix
Cover the digits, the trailing :port, and a /24 if present. A box that stops at the last octet leaves a subnet mask that identifies the range.
Cover the location panel too
Speed-test and diagnostic tools print a city, an ISP name, or coordinates beside the address. Cover those in the same pass or the number was not the point.
Keep the fill on solid black
Digits in a monospaced log font are exactly the small high-contrast shapes that survive a blur or a coarse mosaic. Use the fill.
Export and re-check at 100 percent
Open the downloaded PNG and read the frame top to bottom. Dense logs are where a second occurrence waits.
How much does hiding the number actually buy you
Honestly: it is containment, not immunity. A public address sits in server logs and CDN records across a normal session, so removing it from your screenshot does not make you unresolvable. What it removes is the public, indexed, easy-to-read disclosure — the version that a curious reader or a scanning script picks up from a forum post.
The value of redaction is highest when the address is tied to something else in the same frame. A hostname plus a city plus an address in one image is a subscriber record; each of the three alone is a puzzle with many solutions. Covering the identifying fields together is the operation worth doing properly.
For IPv6 in particular, note that a /64 embeds the interface identifier on many configurations, which means the address can encode a hardware MAC and stay stable across networks. If the frame contains one, cover it — and do not rely on detection to find it.
A final practical note: if the address belongs to a service you administer and the screenshot is going to a public forum, consider whether a test range such as 203.0.113.0/24 documents the point better than a redaction of the real one.
Logs and admin panels leak more than one identifier per screen, and every field on the frame is editable until you export. It is straightforward to redact image online with the address, the hostname, and the location panel covered in one pass.
Frequently asked questions
Is a 192.168.x.x address worth hiding?
It is not routable from the internet, so the direct risk is low. It does describe your internal layout, and it is worth covering when a hostname, a device name, or a network diagram shares the frame.
Why did detection flag my software version 1.2.3.4?
The dotted-quad shape is identical. The matcher cannot distinguish the two from pixels alone, so it reports both and you decide. Delete the box that is not an address.
Does it detect IPv6?
No. Only dot-separated IPv4 shapes are matched. Always box colon-separated addresses yourself.
Does the export keep any metadata?
The file is a new PNG encoded from a canvas, so the source container's metadata does not survive the rebuild.
Can I undo a box placed in the wrong spot?
Yes, with the undo button or Ctrl/Cmd+Z, and redo on Ctrl/Cmd+Shift+Z. Clear all removes every box at once. Nothing is written to disk until you download.
Does this work on a phone?
Yes. Draw with a finger, and use the Draw/Scroll switch on touch screens so a tall log stays scrollable while you box individual lines.