Matter.js removes marked secret fields from its normal command, attribute and diagnostic logs. Those messages could previously include Wi-Fi credentials, Thread network keys and pairing secrets, exposing them when someone shared a log for troubleshooting.
Ingo Fischer’s correction marks forty-one standard fields for redaction on controller and device paths. It changes logging rather than the messages sent to devices. Applications using Matter.js need to adopt the library change.
This does not make every debug log safe to share. Raw decrypted message payloads remain enabled by default and can contain the same secrets; applications can disable those payload logs separately. Values embedded in error messages and unmarked custom-cluster fields are also outside this correction.