Your Online SQL Formatter Might Be Logging Your Database Password

📰 Dev.to · Max

Verify if your online SQL formatter is logging your database password by checking if it's client-side or server-side, and learn how to protect your credentials

intermediate Published 4 Jun 2026

Action Steps

Check the network requests of your online SQL formatter using browser developer tools
Verify if the tool is sending a POST request with your pasted data to a backend server
Test if the tool is client-side by pasting a query and checking if it formats without sending a request to the server
Use a proxy or intercepting tool to inspect the requests and verify if credentials are being logged
Configure your browser to warn you of potential security risks when using online tools

Who Needs to Know This

Developers and DevOps teams benefit from understanding the security risks of online tools and how to mitigate them, especially when working with sensitive database credentials

Key Insight

💡 Not all online tools are client-side, and some may quietly log your credentials, so it's essential to verify their security

Key Takeaways

Verify if your online SQL formatter is logging your database password by checking if it's client-side or server-side, and learn how to protect your credentials

Full Article

Server-side dev tools quietly POST whatever you paste — including credentials — to a backend. Here's the threat model, and a 2-minute way to verify any tool is actually client-side.

Read full article → ← Back to Reads