Don't save the value of password inputs in the snapshot

[rigtorp]

Currently <input type="password"> have their values saved in the snapshot.

For example:

              - generic [ref=e1611]:
                - textbox "Password" [active] [ref=e1612]:
                  - /placeholder: Enter your password
                  - text: hunter2

It would be useful to dump a placeholder or omit it by default.

[dgozman]

@rigtorp You can use PLAYWRIGHT_MCP_SECRETS_FILE environment variable to provide a dotenv-formatted file, and secrets will be automatically redacted from the output. Let me know whether this works for you.

[rigtorp]

That might work, but doesn't seem ideal since I would need to write the un-encrypted secret to tmpfs.

What I'm trying to do is teach a LLM to use playwright-cli to change passwords for me. I made a tool that can fill passwords into the forms fields without sending the password to the LLM provider. However when the LLM uses playwright-cli snapshot to check if the password was filled in correctly the plaintext password leaks into the LLM context and is sent to the provider. That's why ideally there would be a way to mask out all password inputs from playwright-cli snapshot.

I realize what I proposed might not be foolproof, but it does seem to be a reasonable and effective approach.

Thank you for your reply @dgozman !

[pavelfeldman]

I think we are respecting secrets in snapshots in the latest version. try "npx playwright@next cli open" variant to test it.

[rigtorp]

@pavelfeldman i still see the same behavior. I entered tttt in the password field and it shows up in the snapshot.

> export PLAYWRIGHT_MCP_CDP_ENDPOINT=http://localhost:9222
> npx playwright@next cli open https://news.ycombinator.com/
Need to install the following packages:
playwright@1.59.0-alpha-2026-03-26
Ok to proceed? (y) y

### Browser `default` opened with pid 12723.
### Ran Playwright code
```js
await page.goto('https://news.ycombinator.com/');

Page

• Page URL: https://news.ycombinator.com/
• Page Title: Hacker News

Snapshot

• Snapshot

npx playwright@next cli snapshot

Page

• Page URL: https://news.ycombinator.com/login?goto=news

Snapshot

- generic [ref=e1]:
  - text: Login
  - generic [ref=e2]:
    - table [ref=e3]:
      - rowgroup [ref=e4]:
        - 'row "username: arsct" [ref=e5]':
          - cell "username:" [ref=e6]
          - cell "arsct" [ref=e7]:
            - textbox [ref=e8]: arsct
        - 'row "password: tttt" [ref=e9]':
          - cell "password:" [ref=e10]
          - cell "tttt" [ref=e11]:
            - textbox [active] [ref=e12]: tttt
    - button "login" [ref=e13]
  - link "Forgot your password?" [ref=e14] [cursor=pointer]:
    - /url: forgot
  - text: Create Account
  - generic [ref=e15]:
    - table [ref=e16]:
      - rowgroup [ref=e17]:
        - row "username:" [ref=e18]:
          - cell "username:" [ref=e19]
          - cell [ref=e20]:
            - textbox [ref=e21]
        - row "password:" [ref=e22]:
          - cell "password:" [ref=e23]
          - cell [ref=e24]:
            - textbox [ref=e25]
    - button "create account" [ref=e26]

Events

• New console entries: .playwright-cli/console-2026-03-27T02-46-01-603Z.log#L1-L2

[pavelfeldman]

Did you provide secrets file where tttt is mentioned as a secret?

[rigtorp]

I might have misunderstood your comment. My understanding was that you meant that password input contents would not be snapshoted. I didn't try with the secrets file. Thank you for your reply.

…

On Mon, Mar 30, 2026, 21:24 Pavel Feldman ***@***.***> wrote: *pavelfeldman* left a comment (microsoft/playwright-cli#317) <#317 (comment)> Did you provide secrets file where tttt is mentioned as a secret? — Reply to this email directly, view it on GitHub <#317?email_source=notifications&email_token=AABLO264EKLSGHTJO3FZVLD4TMM5RA5CNFSNUABFM5UWIORPF5TWS5BNNB2WEL2JONZXKZKDN5WW2ZLOOQXTIMJVHEYTQMJVGIZKM4TFMFZW63VHNVSW45DJN5XKKZLWMVXHJLDGN5XXIZLSL5RWY2LDNM#issuecomment-4159181522>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AABLO26DMRYCPMOD56NG3FT4TMM5RAVCNFSM6AAAAACW275KJWVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHM2DCNJZGE4DCNJSGI> . You are receiving this because you were mentioned.Message ID: ***@***.***>