String Obfuscator
Partially mask credit card numbers, IBANs, API tokens, emails, and phone numbers into safe shareable forms. Choose mask character, visible characters, and grouping. 100% client-side.
Loading tool...
What is String Obfuscator?
The String Obfuscator partially masks sensitive strings — credit card numbers, IBANs, API tokens, emails, and phone numbers — into safe, shareable forms like •••• •••• •••• 1234. You choose the mask character, how many characters stay visible at the start and end, and optional grouping. Everything runs locally in your browser, so your sensitive data never leaves your device.
Key Benefits
- Share sensitive identifiers safely in logs, tickets, and screenshots
- One-click presets for credit card, IBAN, API token, email, and phone
- Flexible masking with configurable visible characters and grouping
- Meets common PII redaction and PCI-DSS card display conventions
- 100% client-side — no data uploaded, works offline
Common Use Cases
- •Masking credit card numbers before pasting into support tickets
- •Redacting API tokens or secrets in bug reports and chat
- •Sharing partially-hidden IBANs or account numbers with colleagues
- •Preparing safe demo data or example strings for documentation
- •Anonymizing email addresses or phone numbers in shared logs
How to Obfuscate Sensitive Strings
- Paste your sensitive text: Type or paste the string you want to mask — a credit card number, IBAN, API token, email, or phone number — into the input box.
- Pick a preset or adjust manually: Click a preset (Credit Card, IBAN, API Token, Email, Phone) for instant sensible defaults, or manually set the mask character, visible characters at the start and end, and group size.
- Toggle preserve-spaces: When enabled, each space-separated token is masked independently — ideal for card numbers like 4111 1111 1111 1111. Disable it to treat the whole input as one string.
- Copy the masked result: The masked output updates live. Click Copy to send it to your clipboard and paste it safely into logs, tickets, or chat.
Key Features
- Mask credit cards, IBANs, tokens, emails, and phone numbers in one click
- Choose from bullet, asterisk, hash, or X as the mask character
- Control how many characters stay visible at the start and end
- Optional grouping with spaces for long masked strings
- Built-in presets for credit card, IBAN, API token, email, and phone
- 100% client-side — no data ever leaves your browser