ESPHome removes passwords before sending logs across the network

ESPHome prevents its syslog connection from transmitting concealed secrets in plain text. When configured to forward the relevant logs, it previously sent values including Wi-Fi and MQTT passwords and WireGuard private keys to the log collector; terminal formatting only hid them visually.

The component replaces those values with “[redacted]” before building the outgoing message, regardless of its colour-stripping option. The correction addresses a finding from ESPHome’s 2026 security assessment.