A Ubiquiti setup usually means troubleshooting across two overlapping systems: the UniFi controller's exported site backup or config.gateway.json, and EdgeOS's show configuration on EdgeRouter hardware. Both dump network topology, WiFi settings, and credentials in one file. Before that goes into a community forum post or an AI chat asking why a VLAN won't route, it's worth knowing exactly what's in there.
What a UniFi / EdgeOS Config Actually Contains
- WiFi network
x_passphrase— the WPA2/WPA3 pre-shared key, stored in cleartext in UniFi site backups - Local admin account passwords (hashed in the controller database, sometimes present in cleartext in support-export bundles)
radius profileshared secrets used for 802.1X or hotspot authentication- Site-to-site and remote-user VPN
pre-shared-keyvalues undervpn ipsec(EdgeOS) or the UniFi VPN configuration - SNMP community strings under
snmp community - Guest portal and hotspot voucher secrets, and any third-party API keys embedded in integrations
Before and After
The same WiFi passphrase or VPN pre-shared key always maps to the same token throughout the sanitized output, so relationships between sites, VLANs, and tunnels stay readable — only the literal credential is replaced.
Steps
- Install ScrubForge from the Chrome Web Store (free)
- Export a UniFi site backup or run
show configurationon your EdgeRouter - Paste the relevant section into ScrubForge
- Review the sanitized result — passphrases, admin passwords, and shared secrets are tokenized, structure is untouched
- Copy and share, or continue in ScrubForge's built-in AI chat
Why Local Processing Matters
A WiFi pre-shared key or a VPN secret pasted into a public forum thread or a shared AI chat log is effectively public the moment it's posted. ScrubForge sanitizes entirely inside the browser tab — nothing is uploaded before you decide to share it.