Tokenization involves replacing sensitive data with randomized data that is in the same format as the original but carries no intrinsic value, the actual tokens become useless to people with malicious intent.