private String maskPassword(String credentials) {
    return credentials.substring(0, credentials.indexOf(":")) + ":***";
  }
Turns the string representation of a URI into a "friendly URI" by masking the password if the credentials were specified in the URI. The masked password shows as 3 asterisks (***)

@param uri the uri to turn into a friendly URI
@return null if the <i>URI</i> is null, or the "friendly URI" if a password was found in the <i>uri</i> parameter, otherwise the uri is returned as is.
olv-vfs/src/main/java/pl/otros/vfs/browser/util/URIUtils.java