# Mask Field

### Overview

To enhance data security, protect user privacy, and ensure compliance with regulations such as **GDPR**, **HIPAA**, and **PCI-DSS**, MangoApps Trackers support masking of sensitive information. This feature allows you to obscure sensitive data stored in specific columns, making it unreadable to unauthorized viewers.

***

### What is Masking?

Masking hides sensitive values in tracker columns by displaying them as `********` (eight asterisks), preventing users from viewing or guessing the actual content.

***

### Supported Column Types

Masking is **optional** and can be enabled at the time of column creation. Once set, it **cannot be changed** later.

<div data-full-width="false"><figure><img src="https://1570117564-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LjKTG8tJVFEuapHmLNC%2Fuploads%2Fd9O8ScyrvJ5Ufe8iK80X%2F23-04-2025-02-52-23.png?alt=media&#x26;token=3831c268-96fc-41de-b1e3-93f96a76031a" alt="" width="563"><figcaption></figcaption></figure></div>

Masking can be enabled for the following column types:

* Amount
* Number
* Text

***

### Mask Property: Key Rules

**Masking is permanent**, once a column is created with masking enabled, this setting **cannot be turned on or off** later.

After masking is enabled, the type of a column selected cannot be changed.

**Masked columns&#x20;**<mark style="color:red;">**cannot**</mark>**&#x20;be used in or selected as:**

* Filters
* Sorting
* Grouping
* Workflow conditions

**Masked values will&#x20;**<mark style="color:red;">**not**</mark>**&#x20;appear in:**

* Emails
* News feeds
* Messages
* Push notifications

***

### Form Behavior for Masked Fields

When filling out a form, the **submitter can view** the actual value in a masked field **before submission**.

<figure><img src="https://1570117564-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LjKTG8tJVFEuapHmLNC%2Fuploads%2FsMYtUG5cgZa6qkDZqOdY%2Fezgif-42c3150f118ae7.gif?alt=media&#x26;token=ba26380d-0cb9-49f0-bf21-c527d16f8335" alt="" width="563"><figcaption></figcaption></figure>

Once submitted the value becomes permanently **hidden**.

<mark style="color:red;">After submission, this value is</mark> <mark style="color:red;"></mark><mark style="color:red;">**not viewable by anyone**</mark><mark style="color:red;">, including the submitter and network admins</mark>

The field can **conditionally be shown or hidden** using the form rule builder (but not the value).

***

### Use Cases for Value Masking

<table data-full-width="true"><thead><tr><th></th><th>Use Case</th><th>Masked Field</th><th>Purpose</th></tr></thead><tbody><tr><td><h4>Healthcare</h4><p>(HIPAA Compliance)</p></td><td>Patient Records</td><td>Social Security Number, Insurance Policy Number, Medical Record ID</td><td>Protects patient identifiers and ensures only authorized users can access this information, maintaining HIPAA compliance.</td></tr><tr><td><h4>Human Resources </h4><p>(GDPR Compliance)</p></td><td>Employee Salary Tracker</td><td>Salary Amount, Bank Account Number, National ID</td><td>Prevents sensitive compensation or personal data from being accessed or shared unintentionally, supporting GDPR requirements.</td></tr><tr><td><h4>Finance &#x26; Accounting</h4><p>(PCI-DSS Compliance)</p></td><td>Reimbursement Requests or Vendor Payments</td><td>Credit Card Number, Tax ID, Bank Details</td><td>Secures payment information and helps comply with PCI-DSS regulations by masking sensitive financial fields.</td></tr><tr><td><h4>E-commerce Operations</h4></td><td>Refund or Chargeback Requests</td><td>Transaction ID, Card Digits, Customer Bank Info</td><td>Ensures customer financial data is protected during the review and processing of payment-related issues.</td></tr><tr><td><h4>Legal &#x26; Compliance</h4></td><td>Case File Tracker</td><td>Client Confidential ID, Settlement Amounts</td><td>Maintains confidentiality of legal case information while allowing for structured data management.</td></tr><tr><td><h4>Procurement</h4></td><td>Vendor Onboarding Tracker</td><td>Tax Numbers, Contract Amounts, Bank Details</td><td>Protects sensitive vendor information from unauthorized access while enabling collaboration across departments.</td></tr><tr><td><h4>IT &#x26; Security Teams</h4></td><td>Internal Access Log Reviews</td><td>IP Address, Device Identifiers, Session Tokens</td><td>Prevents misuse of security log data while still enabling teams to audit and track system activity effectively.</td></tr></tbody></table>

***

### Low-Code Tracker App Support

In low-code Tracker apps and widgets, developers can use a special `%{decrypt}` function within custom HTML/CSS to reveal masked values. However, this should **only** be used by users who are authorized to view those records.

Click [here](https://guides.mangoapps.com/user-guide/trackers/mask-field/example-mask-widget) to view an example of this function.

<figure><img src="https://1570117564-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LjKTG8tJVFEuapHmLNC%2Fuploads%2FrXqW7752NK5wZdoGFFy2%2F24-04-2025-11-03-33.png?alt=media&#x26;token=f92666be-b307-4071-9824-927b03866618" alt=""><figcaption></figcaption></figure>