String obfuscator
Mask part of a sensitive string before sharing it.
Loading tool…
About the string obfuscator
Masks the middle of a sensitive string while leaving a chosen number of characters visible at each end, so a key or account number stays recognisable in a screenshot or ticket without being usable.
Frequently asked questions
How much should I leave visible?
Four characters at each end is the usual convention and enough to identify which credential you mean. Leaving more of a short secret can narrow it enough to matter.
Is masking enough after a leak?
No. If a secret has already been exposed, rotate it. Masking is for sharing a reference to a credential, never for containing one that has escaped.