Self-Service Password Reset masks the email characters while sending an email token to the user for updating their profile, activating their account, or resetting a forgotten password to secure user data.
Masking an email address character helps to ensure the privacy and security of the user's information and protects against potential security threats such as email harvesting or phishing attacks. Additionally, masking the email address also helps to prevent the accidental disclosure of sensitive information.
By default, the SSPR masks the email address in the below format:
s***********@m*********.com
Self-Service Password Reset allows you to mask the required characters of an email address by customizing the regular expression in the configuration settings.
To customize email masking regular expression:
Log in to Self Service Password Reset at https://dns-name/sspr as an administrator.
In the toolbar, click your name.
Click Configuration Editor.
Click Settings > Application > Application > App Property Overrides.
Click Add Value.
Specify the new value to override the default value of email masking in the below format:
token.mask.email.regex=<regular expression as preferred>
The default value is
token.mask.email.regex=(?<=.).(?=[^@]*?@)|(?:(?<=@.)|(?!^)\G(?=[^@]*$)).(?=.*\.)
Click OK to add the value.
Click Save changes.