var reg = /(^.{10})(?:.{4})(.*)/; var str = 'abcdefgABCDEFGabcdefgABCDEFGabcd'; var newStr = str.replace(reg, '$1****$2'); console.log(newStr); 'abcdefgABC****abcdefgABCDEFGabcd'