const userInfo = 'userPrivateInfoMasking'; const masking = userInfo.substring(0, 4) userInfo.substring(4, userInfo.length).replace(/[0-9a-zA-Z_]/g, "*"); console.log(masking); // user************