Explain like I'm five · Security

What is Data Masking?

Data masking, tokenization, and pseudonymization, told as a story about swapping the names on a guest roster for numbered tickets.

GUEST ROSTERTom · room 3 · key 12Ann · room 5 · key 7Max · room 1 · key 9the real rosterGUEST ROSTER (copy)Tom · room 3 · key 12Ann · room 5 · key 7Max · room 1 · key 9copied exactlyone roster to practice on, please!practicing a new shelfthe real names are right there on the practice sheet

The carpenter wants a roster to practice a new shelf on.The clerk copies the real roster exactly — names, room numbers, key numbers, everything. The carpenter only wanted to practice.

rosterthe practice sheet sits in a village workshoprostera thief picks it up: name, room, keywhy is my name in the village?the guest is upsetit was only practice — and the real thing leaked

The practice sheet sits in a village workshop. The real thing leaks.Nobody guards a practice sheet like the castle. A thief who finds it learns "Tom, room 3, key 12." It was practice — and a real guest gets hurt.

THE REAL ROSTERTom · room 3 · key 12Ann · room 5 · key 7Max · room 1 · key 9#4821the ticket machinePRACTICE ROSTER#4821 · room 3 · key ★★#0937 · room 5 · key ★★#5512 · room 1 · key ★★number↔name listin a locked chestonly the king has the keynames become numbers, key numbers become starspractice never needs the real name — the chest stays in the castle

Data masking is handing out a number instead of a name.Names become numbers, key numbers become stars. The list that joins number to name goes in a locked chest. Practice never needs the real name.

Name → numberundoing it takes the chest key
The locked chestthe real list never leaves
Stars over itshow only a part
Scramble itcan't be undone, fine for counting
MASKTOKENSCRAMBLElooks likeT★★#4821xq7 (scrambled)can it be undone?noonly with the chest keyneveruse it whenshowing on a screenthe real name is needed latercounting, statisticsall three mean working without the real name

Mask, token, scramble — they differ in whether you can undo them.Stars are good for showing on a screen. A number can be undone with the chest key. Scrambled can never be undone — use it when you only need to count.

#4821practice workscounting works too#4821?the thief can't use itthe real names exist only in the locked chest in the castle

Practice works, counting works — and the thief gets nothing.But if the ticket still says "room 3, arrived December 3rd," someone might work out who it is. Which papers get a number is decided by the colored stamp.

In one breath

Data masking and tokenization = on practice and statistics papers, hand out a number instead of a name, cover parts with stars, and keep the number↔name list in a locked chest. Practice works; the thief gets nothing.

When personal data goes to dev, test, or analytics environments, real values are replaced by tokens, partial masks, or irreversible transforms. The token-to-original mapping lives only in a token vault; anonymization cannot be reversed.

When grown-ups say it

Masking
Stars over it. T★★, key ★★. Show only a part, never undo. Common on screens.
Tokenization
Name → number. A meaningless number stands in for the real value. The number alone tells you nothing.
Pseudonymization
A number you can undo. A number↔name list exists somewhere, so it can be undone with the key. Which is why the list must be guarded.
Anonymization
Scrambling it. No list, no key. Nobody can undo it. Use it when you only need to count.
Token vault
The locked chest. Where the number↔name list lives. The best-locked chest in the castle. → the master key in the vault
PII
Guest name, room, key. Anything that identifies someone. Not just a name — room number plus date can do it too.
Data classification
Which papers get a number. A red stamp means numbers first. → a colored stamp on every paper
Versus encryption
A sealed letter opens fully with the key. A sealed letter reads in full once you have the key. A number has no name in it at all, so practice stays safe. → the letter no one reads without the key
Next story
The Rented-Shed Lock-Up Check →
Want another term as a picture book? Request →