Skip to content


A Tokenization algorithm is the only type of algorithm that allows you to reverse its masking. For example, you can use a Tokenization algorithm to mask data before you send it to an external vendor for analysis. The vendor can then identify accounts that need attention without having any access to the original, sensitive data. Once you have the vendor’s feedback, you can reverse the masking and take action on the appropriate accounts.

Like Mapping, a Tokenization algorithm creates a unique token for each input such as “David” or “Melissa.” The actual data (for example, names and addresses) are converted into tokens that have similar properties to the original data – such as text and length – but no longer convey any meaning. The Delphix Masking Engine stores both the token and the original so that you can reverse masking later.

Creating a Tokenization Algorithm via UI

  1. At the top right of the Algorithm tab, click Add Algorithm.

  2. Select Tokenization Algorithm. The Create Tokenization Algorithm pane appears.

  3. Enter an Algorithm Name.


    This MUST be unique.

  4. Enter a Description.

  5. Click Save.

Once you have created an algorithm, you will need to associate it with a domain.

  1. Navigate to the Home>Settings>Domains page and click Add Domain.

  2. Enter a domain name.

  3. From the Tokenization Algorithm Name drop-down menu, select your algorithm.

Next, create a Tokenization Environment:

  1. On the home page, click Environments.

  2. Click Add Environment.

  3. For Purpose, select Tokenize/Re-Identify.

  4. Click Save.


    This environment will be used to re-identify your data when required.

  5. Set up a Tokenization job using the tokenization method. Execute the job.


Here is a snapshot of the data before and after Tokenization to give you an idea of what it will look like.

Before Tokenization

After Tokenization