SQL Query Masker

Mask your SQL before you share it.

SQL Query Masker replaces table and column names with tokens, so you can paste a query into an AI tool or a support ticket without describing your database. It puts the real names back when you ask. Everything runs on your PC.

Download free for Windows Get Pro, $29

The Desktop app is free, with no account and no time limit. Pro adds SSMS and VS Code. Windows 10/11, 64-bit. Seeing a Windows warning?

your querystays on your PC

SELECT c.CustomerID, c.CustomerName, c.Email
FROM dbo.Customers AS c
WHERE c.Region = 'West'
ORDER BY c.CustomerName;

what you paste7 identifiers masked

SELECT A01.C96D, A01.CU5E, A01.EJ9L
FROM D9TO.C52S AS A01
WHERE A01.R4YN = 'West'
ORDER BY A01.CU5E;

Hover or tap a highlighted name to see the token that replaces it. This is real output from the app. Notice that the string 'West' is left as written.

See it work

Screen recordings of the real tools, without sound. The same masking in all three.

Fig. 1. Desktop appFree
Paste a query and click Mask. Names become tokens on the right, while keywords and string literals stay as written.

Fig. 2. SQL Server Management StudioPro
Mask & Copy turns the selection into a protected block, keeps the private mapping in your editor, and copies the safe SQL without it. Customize Mapping lets you choose which names are masked.

Fig. 3. Visual Studio CodePro
Right-click your SQL and choose SQL Query Masker: Mask Query, Mask & Copy, Unmask Query or Customize Mapping. Keyboard shortcuts work too.

How it works

The mapping that undoes the masking lives in your own file, not on a server.

Mask. Select the SQL and run Mask. Table, column, schema, database and alias names become tokens. The same name always gets the same token, so the query still reads as one coherent query.
Keep the mapping private. The original names are saved in a comment block inside your file. Copy only the masked SQL (in SSMS and VS Code, Mask & Copy does this in one step).
Paste, then unmask. Share the masked query. When you have an answer, run Unmask and the original names come back.

-- SQL QUERY MASKER BLOCK START
SELECT A01.CC2D, A01.F3UE, A01.L79E
FROM C99N.SC7S.CE9S AS A01
WHERE A01.O69S = 'Completed'
ORDER BY A01.O5DL DESC;

-- ============ SQL QUERY MASKER PRIVATE MAPPING ============
-- DO NOT SHARE OR COPY THIS SECTION. It contains original identifiers.
-- To share safely, use: SQL Query Masker > Mask & Copy
-- To restore, select the protected SQL and choose:
--   SQL Query Masker > Unmask Query
-- __SQLQUERYMASKER_MAPPING__={"Customers":"CE9S","sales":"SC7S", ...}
-- ============ END PRIVATE MAPPING ============
-- SQL QUERY MASKER BLOCK END

Condensed from a real SSMS result. The mapping line is shortened here.

What it masks, and what it doesn't

Read this before you rely on it. Masking hides names. It does not make a query safe to share by itself.

It masks

Table, column, schema, database and alias names
Bracketed names, and the brackets stay in place
Every repeat of a name, with the same token each time
Only the names you choose, with Customize Mapping (Pro)

It leaves as written

SQL keywords and function names
String literals, such as 'West'
Comments
Numbers and operators

Know the limits

T-SQL (SQL Server) only
Literals and comments can still reveal things. Check them before you share.
The shape of a query and its values can say a lot even with the names hidden.
Nothing is uploaded. Masking and unmasking run on your PC.

Free and Pro

The Desktop app is free. Pro adds the tools you already work in.

Capability	Free	Pro
Desktop app (mask and unmask)	Yes	Yes
Reversible, private mapping	Yes	Yes
SQL Server Management Studio integration	No	Yes
Visual Studio Code extension	No	Yes
Customize Mapping (choose exactly what is masked)	No	Yes
Price	$0	$29 one-time

Download Free (v1.5.0) Buy Pro, $29

Pro is a one-time purchase, not a subscription. One license works on up to 2 of your devices, includes all v1.x updates, and supports SSMS 19, 20, 21 and 22 and Visual Studio Code. After checkout you get your license key and the Pro installers by email. Payments are handled by Lemon Squeezy, and there is a 14-day money-back guarantee. See the license, privacy and sales terms.

Seeing a Windows or browser warning? That is normal for new software. Browsers and Windows SmartScreen warn about files that few people have downloaded yet ("not commonly downloaded", or "Windows protected your PC"). It does not mean the file is unsafe. The installers are digitally signed by Front Rowe Studios LLC, and in the Windows prompt the publisher should read Front Rowe Studios LLC. In Edge choose Allow download (or Keep); in Windows choose More info, then Run anyway. To double-check a download first, compare its SHA-256 (PowerShell: Get-FileHash <file> -Algorithm SHA256) with the value below, or right-click the file and open Properties > Digital Signatures.

Free installer SHA-256: 10170152F94DDE36E744227C20F52D9F30AFE8276A771B29D2BCD19005071C68