diff --git a/controllers/user.go b/controllers/user.go
index 870721bf..4c000764 100644
--- a/controllers/user.go
+++ b/controllers/user.go
@@ -25,7 +25,7 @@ import (
 // @Success 200 {array} object.User The Response object
 // @router /get-global-users [get]
 func (c *ApiController) GetGlobalUsers() {
-	c.Data["json"] = object.GetGlobalUsers()
+	c.Data["json"] = object.GetMaskedUsers(object.GetGlobalUsers())
 	c.ServeJSON()
 }
 
@@ -37,7 +37,7 @@ func (c *ApiController) GetGlobalUsers() {
 func (c *ApiController) GetUsers() {
 	owner := c.Input().Get("owner")
 
-	c.Data["json"] = object.GetUsers(owner)
+	c.Data["json"] = object.GetMaskedUsers(object.GetUsers(owner))
 	c.ServeJSON()
 }
 
@@ -49,7 +49,7 @@ func (c *ApiController) GetUsers() {
 func (c *ApiController) GetUser() {
 	id := c.Input().Get("id")
 
-	c.Data["json"] = object.GetUser(id)
+	c.Data["json"] = object.GetMaskedUser(object.GetUser(id))
 	c.ServeJSON()
 }
 
diff --git a/object/user.go b/object/user.go
index 05747c3a..a29f61f3 100644
--- a/object/user.go
+++ b/object/user.go
@@ -221,3 +221,19 @@ func GetUserField(user *User, field string) string {
 	f := reflect.Indirect(u).FieldByName(field)
 	return f.String()
 }
+
+func GetMaskedUser(user *User) *User {
+	user.Password = "***"
+	user.Github = "***"
+	user.Google = "***"
+	user.QQ = "***"
+	user.WeChat = "***"
+	return user
+}
+
+func GetMaskedUsers(users []*User) []*User {
+	for _, user := range users {
+		user = GetMaskedUser(user)
+	}
+	return users
+}