1. a record's generated toString: NaiveDb[url=jdbc:postgresql://db/app, password=hunter2] DbProperties overrides toString: DbProperties[url=jdbc:postgresql://db/app, username=app, password=] 2. /actuator/env and /actuator/configprops, Boot 4.1.2 defaults: GET /actuator/env/db.password value shown: ****** GET /actuator/env/internal.signing.material value shown: ****** GET /actuator/configprops body contains the password: false 3. same, management.endpoint.env.show-values=ALWAYS and configprops.show-values=ALWAYS: GET /actuator/env/db.password value shown: hunter2 GET /actuator/env/internal.signing.material value shown: also-secret-but-not-named-like-one GET /actuator/configprops body contains the password: true