Security tools

Universal metadata scrubber

Strip metadata from a PDF, image (jpg/png/webp), or Office document (docx/xlsx/pptx). Dispatches to the engine each format already has (pdf-lib, jsquash re-encode, a new OOXML docProps stripper covering all three docProps parts, custom properties included, plus Word tracked-change and comment author names). It does not touch the document's own body text, or comment authorship inside xlsx/pptx parts; the output line names exactly what was and was not scrubbed. Video files are refused, not silently passed through: this tool does not have a verified metadata-strip path for them.

Runs on your device. The file is never uploaded.

Universal metadata scrubber dispatches on the extension. A PDF goes through pdf-lib, a jpg, png or webp is decoded and re-encoded at quality 92, and a docx, xlsx or pptx has all three docProps parts emptied. Office and image output carries a -clean suffix. A video is turned away, because no verified strip path for one exists here.

Input

Questions

Which file types can it scrub?

PDFs, JPEG, PNG and WebP images, and Office documents in docx, xlsx and pptx. Each goes to the engine the site already has for it: pdf-lib for PDFs, a decode and re-encode for images, and an OOXML property stripper for Office files. Any other extension is refused with a message naming the formats it handles.

Why will it not scrub my video?

Because it has no verified way to do it. The message says video metadata stripping is not implemented, and explains that the available library documents reading tags rather than rewriting them. Refusing is the honest outcome; passing your file through untouched while claiming success would not be.

What exactly is removed from a docx?

The core and app property fields, which are creator, last modified by, subject, title, description, keywords, category, company and manager. All custom properties are removed wholesale, since they have no fixed names. And tracked change and comment author names, initials and user ids in the Word parts are set to Author with their timestamps deleted, which covers the people part where Word keeps a commenter name and email address.

What does it leave behind?

The output line names it, and that list was derived by scrubbing real files and grepping the result. Body text is untouched, including anything hidden or inside a tracked change. Comment authorship inside xlsx and pptx parts is not anonymised, only the Word parts are. Edit session ids, the attached template path, created and modified timestamps and the authoring tool fields also stay.

Does scrubbing an image lose quality?

For JPEG, yes, a little. The image is decoded to pixels and re-encoded at quality 92, which is what removes every metadata block there is. PNG and WebP go through the same path. If you need the original pixels untouched, this is not the tool for it.

What are the output files called?

Images and Office documents come back with a -clean suffix before the extension, and the PDF path returns a file with a -meta suffix, having cleared its title, author, subject, creator, producer and keywords. Run Privacy risk scanner on the result to see what a scrub cannot reach.

Related Security tools