Cypress Cloud: Test Replay now masks sensitive form inputs by default
Blog post from Cypress
Cypress Cloud has enabled default masking of sensitive form input values in Test Replay artifacts for all projects, replacing passwords, hidden-field values, and payment information identified through standard autocomplete attributes with asterisks before DOM data is uploaded. The change preserves form structure, layout, and behavior for debugging while preventing entered values from appearing in downloadable replay data, and it does not affect test creation or execution. Organization Owners and Admins can disable masking for individual projects through Test Replay settings, while other users see the option locked to prevent accidental exposure. Cypress emphasizes that masking is a safeguard rather than a replacement for secure test-data practices, recommending test-only credentials, environment variables through cy.env(), Command Log masking, and cy.intercept() fixtures to keep sensitive data out of recordings and network artifacts.
No tracked trend matches for this post yet.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.