diff --git a/manifests/backend/vsphere.pp b/manifests/backend/vsphere.pp
index 34d7cce..0d35bbe 100644
--- a/manifests/backend/vsphere.pp
+++ b/manifests/backend/vsphere.pp
@@ -82,7 +82,7 @@ class glare::backend::vsphere(
     'glance_store/vmware_ca_file':            value => $vcenter_ca_file;
     'glance_store/vmware_server_host':        value => $vcenter_host;
     'glance_store/vmware_server_username':    value => $vcenter_user;
-    'glance_store/vmware_server_password':    value => $vcenter_password;
+    'glance_store/vmware_server_password':    value => $vcenter_password, secret => true;
     'glance_store/vmware_store_image_dir':    value => $vcenter_image_dir;
     'glance_store/vmware_task_poll_interval': value => $vcenter_task_poll_interval;
     'glance_store/vmware_api_retry_count':    value => $vcenter_api_retry_count;
diff --git a/spec/classes/glare_backend_vsphere_spec.rb b/spec/classes/glare_backend_vsphere_spec.rb
index 7d492bc..b144c2d 100644
--- a/spec/classes/glare_backend_vsphere_spec.rb
+++ b/spec/classes/glare_backend_vsphere_spec.rb
@@ -43,7 +43,7 @@ describe 'glare::backend::vsphere' do
         is_expected.to contain_glare_config('glance_store/vmware_insecure').with_value('True')
         is_expected.to contain_glare_config('glance_store/vmware_server_host').with_value('10.0.0.1')
         is_expected.to contain_glare_config('glance_store/vmware_server_username').with_value('root')
-        is_expected.to contain_glare_config('glance_store/vmware_server_password').with_value('123456')
+        is_expected.to contain_glare_config('glance_store/vmware_server_password').with_value('123456').with_secret(true)
         is_expected.to contain_glare_config('glance_store/vmware_store_image_dir').with_value('/openstack_glance')
         is_expected.to contain_glare_config('glance_store/vmware_task_poll_interval').with_value('<SERVICE DEFAULT>')
         is_expected.to contain_glare_config('glance_store/vmware_api_retry_count').with_value('<SERVICE DEFAULT>')