***sword - Hiding part of a field

Can anyone tell me how to character out part of a field like below...

Thank you for registering.

Your ID is - userid
Your Password is ***sword

substr_replace()

Thanks.