← Return to guide list

Code and Log Masking Checklist

This checklist covers information to replace before sharing and how to review masking and anonymization results.

Information to exclude before entering

API key, access token, private key, password
Customer name, contact name, email address, phone number, address
Internal domain, IP address, host name, file path
Production DB connection destination, schema name, table name, actual data
Item name/organization name included in comments and exception messages

Remove credentials before entering data into a masking tool. If credentials may have been exposed, revoke and reissue them instead of relying only on the masked output.

Masking/anonymization procedures

Cut out only the minimum range necessary for sharing.
Select a masking tool that matches the target format.
Set the type of masking target and handling of comments and values.
Search the entire output, including any sections you manually unmasked.
Check for broken parentheses, quotes, JSON syntax, etc.

Final confirmation before sharing

Choose several terms unique to the original data and confirm that none remain in the output.
Check screenshots, file names, and the title of the destination as well.
Run a syntax check on the masked code when possible.
Confirm the recipients and intended visibility before sharing.

Related tools