Data Mask Studio

Data Mask Studio is a free Windows desktop app for masking sensitive information in CSV files and local HTML content. It lets users choose columns to preserve, mask, or exclude, normalize and reshape data, and reuse profiles for batch processing. CSV files can be handled individually or in batches, with selected data restored later. Consistent tokens can preserve repeated values across records and files, and known codes can be restored in local HTML files while keeping their markup. Original values and mappings are kept in an encrypted local vault, which is needed for restoration. The maker describes HMAC-SHA256 tokens, AES-256-GCM vault encryption, and Windows DPAPI protection for local keys. Processing stays local, without telemetry or automatic synchronization. Other listed tools include password-protected portable backups, vault auditing, diagnostics, temporary-file cleanup, and compaction. Releases include a Windows installer and portable ZIP. The app is GPL-3.0-only. It targets Windows because of its DPAPI reliance; executables are not yet digitally signed, and the maker cautions that the product does not guarantee irreversible anonymization.

Data Mask Studio combines local masking, selective restoration, and vault-based storage for CSV and HTML workflows. Its Windows-only distribution, unsigned executables, and anonymization caveat are important considerations.

Data Mask Studio suits Windows users who need to mask CSV data or local HTML content while retaining selective restoration. Its local vault and profile-based batch workflows may fit users who want to prepare and process datasets on their device.

Data Mask Studio is a free Windows desktop app for preparing CSV files and local HTML with repeatable, reversible masking. It is best suited to people who need consistent replacements for analysis while keeping originals under local control. Its selective restoration and file-preparation tools are useful, provided Windows-only operation and vault management fit the workflow.

Overview

Configured prefixes and keyed HMAC-SHA256 tokens let repeated values map consistently across rows and files, preserving correlations that can matter in analysis. The app stores original values and mappings in an encrypted local vault, which is required to restore them. This is a practical fit for controlled working copies; anyone handling the vault must also protect access to it and maintain usable backups.

Data Mask Studio uses static masking. The maker says it does not guarantee irreversible anonymization, so it is a poor fit when the goal is to publish data that cannot be linked back to individuals.

Key features

Prepare and mask CSV files

Users can choose columns to preserve, mask, or exclude, normalize values, rename or compose columns, and reuse profiles for batch jobs. Individual and batch masking support both one-off preparation and repeatable workflows. Bounded-memory streaming is intended to handle large files without loading them in full, while static masking means the app does not provide a dynamic access-control layer.

Restore selected content

Selective CSV restoration lets users recover chosen data, and the app can restore known codes in local HTML files while preserving their markup. This can help when a report or dashboard needs some original values returned. Restoration depends on the encrypted vault, so losing access to it removes that recovery path.

Vault protection and maintenance

The maker says vault data uses AES-256-GCM and local keys are protected with Windows DPAPI. Password-protected portable backups, integrity auditing, diagnostics, temporary-file cleanup, and controlled vault compaction support ongoing maintenance. These controls are useful for local custody, but the product has no remote key recovery or synchronization.

Pricing

Data Mask Studio is free: its plan costs nothing and includes the open-source desktop app under GPL-3.0-only. There are no paid tiers to trade features against. The source is distributed under the GNU General Public License v3.0 only.

Platforms

The app targets Windows because it relies on Windows DPAPI. Each release offers a per-user installer and a portable ZIP, giving users a choice between installation and running from a portable package. The executables are not digitally signed yet, so Windows may show a SmartScreen warning. There is no automatic updating.

Who it's for

This is a sensible choice for Windows users who prepare CSV datasets or local HTML dashboards, want consistent token values across files, and need selective restoration later. Its local processing and lack of telemetry or automatic synchronization suit workflows that keep sensitive material on the machine. It is less suitable for cross-platform teams, cloud-synchronized work, or anonymization that must be irreversible.

Pros and cons

• Consistent masking: keyed tokens preserve repeated-value relationships across records and files, which can keep masked datasets useful for analysis.
• Broad CSV preparation: column selection, normalization, renaming, composition, and reusable profiles cover recurring data-cleanup needs alongside masking.
• Controlled recovery: selective CSV and HTML restoration provides a route back to original values, with HTML markup preserved.
• Local custody: processing stays on the machine, with an encrypted vault and password-protected portable backups; the user remains responsible for vault access and backup management.
• Windows limitation: reliance on DPAPI rules out other desktop platforms, and unsigned executables may trigger a SmartScreen warning.
• No recovery service: absent remote key recovery and synchronization, losing the local vault or key can leave originals unrecoverable through the app.
• Not irreversible anonymization: the maker explicitly warns that masking does not guarantee irreversible anonymization.

Alternatives

Data Masking Software is a directory of options for readers comparing tools across the category.

• MySQL is a better direction for readers seeking a database platform with replication, high availability components, and connectors, alongside its SQL and NoSQL applications.
• Tonic Fabricate may fit readers who want a hosted service with cloud access and usage credits; its free plan includes $5 monthly credits, while the Plus plan is $29 a month with $25 monthly credits and metered additional usage.
• ARX Data Anonymization Tool is another free, open-source option, distributed under Apache License 2.0, for readers comparing anonymization tools across Windows and other platforms.
• DataVeil suits readers looking for database-oriented masking on Windows or Linux; its free Community License never expires and covers databases up to 10GB.
• Greenmask is a free open-source utility for PostgreSQL users who work on Linux, macOS, or self-hosted environments; MySQL support is in progress.
• Jailer is a free Apache-licensed database tool for readers seeking an alternative that supports Windows, Linux, macOS, and API use.
• MOSTLY AI offers a free plan for readers considering an API, web, or self-hosted option.
• Oracle Cloud Infrastructure Secret Management is an alternative for readers evaluating a web and API secret-management service.

Verdict

Choose Data Mask Studio if you need free, local, repeatable CSV masking with selective restoration and your workflow is firmly on Windows. Its strongest reason to choose it is the combination of consistent tokens, flexible data preparation, and a locally encrypted vault. Look elsewhere if you need cross-platform access, automatic synchronization, remote key recovery, or a guarantee of irreversible anonymization.