---
schema_version: "1"
id: f910e4d33fb251bc3b7cd546f04ec01728b832113431d41905fd43c8109b4603
title: Protecting App Property Values
collection: mulesoft
version: current
locale: en-us
portal_url: https://docs.salesforce.com/mulesoft/current/en-us/cloudhub-2/ch2-protect-app-props.md
canonical_url: https://docs.mulesoft.com/cloudhub-2/ch2-protect-app-props
source_site: docs.mulesoft.com
content_type: documentation
content_hash: e8b9b401f916de5683af87f0bd2d2bf180ef08f60ae2f61c21c7fc198777dd9a
description: MuleSoft Documentation Site
latest: true
---
---
product: CloudHub 2.0
---

# Protecting App Property Values

> For the full documentation index, see: https://docs.mulesoft.com/llms.txt

CloudHub 2.0 enables you to protect application property values by displaying the property name but
not its value, in Anypoint Runtime Manager.

Additionally, the value isn’t viewable or retrievable by any user. CloudHub 2.0 resolves the
property internally at runtime. These protected application values are encrypted and stored in the
Anypoint Security secrets manager, which, in turn, is encrypted per user organization. Because the
values are encrypted, you can’t view them in Anypoint Security secrets manager or Anypoint Runtime
Manager.

> [!NOTE] On CloudHub 2.0, secure-property masking is configured in Anypoint Runtime Manager on the
> **Properties** tab (property protection).
>
> If you’re migrating from CloudHub 1.0, the `secureProperties` setting in `mule-artifact.json`
> doesn’t mask values on CloudHub 2.0. To mask values, set property protection on the **Properties**
> tab, as described in the following sections. Runtime Manager properties override archive-bundled
> properties of the same name.

> [!IMPORTANT] Protected property values are separate from the encrypted Mule application properties
> stored in secure configuration files. See
> [Secure Configuration Properties](https://docs.mulesoft.com/mule-runtime/latest/secure-configuration-properties).

## Protect Property Values in Runtime Manager

Set protected properties via the table view for granular control over each property and value.

Although you can attempt to protect a single property more than once, Runtime Manager issues a
warning and protects only the final instance of that property.

1.  From Anypoint Platform, select **Runtime Manager** > **Applications**.

2.  Click the app name.

3.  In the navigation menu, click **Settings**.

4.  On the **Settings** page, click the **Properties** tab.

5.  Depending on how many properties you want to protect, choose either:

    - To protect properties one at a time, click **Table view**.

    - To protect multiple properties, use **Text view** to add the key-value pairs, switch to
      **Table view**, and continue to Step 8 to protect the properties.

6.  In the **New Key** field, enter the property name to protect.

7.  In the **New Value** field, enter the property value.

8.  In the value field, click **Protect** and then click **Protect value** to confirm.

    ![Protect button on the Properties tab](/mulesoft/current/en-us/cloudhub-2/_images/ch2-protected-props-protect.png)

9.  Depending on the deployment status, choose either:

    - If this application is deployed, click **Apply Changes**.

    - If you’re ready to deploy the application, click **Deploy Application**.

On the **Properties** tab, the values for properties that you just protected are now no longer
visible to you or any other user.

In the following example, the values for `birthdate` and `password` are protected, but the value for
`username` is not:

![Protected values on the Properties tab on the application Settings page](/mulesoft/current/en-us/cloudhub-2/_images/ch2-protected-props.png)

After you commit the values and deploy the app, the protected property values don’t appear in the
console and aren’t sent and received between the console and CloudHub.

## Replace a Protected Property Value

After you set the property value, you can’t retrieve it. However, you can replace the protected
property value with a new protected value:

1.  From Anypoint Platform, select **Runtime Manager** > **Applications**.

2.  Click the app name.

3.  In the navigation menu, click **Settings**.

4.  On the **Settings** page, click the **Properties** tab.

5.  Click **Table view**.

6.  Click **…​** > **Replace protected value**:

    ![Replace protected value option](/mulesoft/current/en-us/cloudhub-2/_images/ch2-protected-props-replace.png)

7.  Enter a new value in the field.

8.  Click **Apply**, then **Apply Changes**.

## See Also

- [Secure Configuration Properties](https://docs.mulesoft.com/mule-runtime/latest/secure-configuration-properties)

- [Changing App Behavior with Properties](https://docs.mulesoft.com/cloudhub-2/ch2-manage-props)

- [Deploying Apps to CloudHub 2.0](https://docs.mulesoft.com/cloudhub-2/ch2-deploy)