Java Tech Enthusiast

Oct 5, 2026 · Backend Development

Java 27 JFR Now Auto-Redacts Passwords: Why Your Diagnostic Files Were Leaking Secrets

Java 27 introduces JFR in-process data redaction (JEP 536) that automatically masks sensitive environment variables, system properties, and JVM arguments matching default glob patterns like *password*, *secret*, *token*, and *api*key*, with support for custom patterns via FlightRecorderOptions, though custom JFR events and child processes remain unprotected.