diff --git a/src/command/check/report.c b/src/command/check/report.c
index 99b7fc8bc0..1b8184041e 100644
--- a/src/command/check/report.c
+++ b/src/command/check/report.c
@@ -48,6 +48,7 @@ checkReportConfigVal(JsonWrite *const json, const String *const optionName, cons
             if (option.multi)
             {
                 ASSERT(strLstSize(valueList) >= 1);
+                ASSERT(!cfgParseOptionSecure(option.id));
 
                 // Split environment values
                 if (env)
@@ -68,7 +69,11 @@ checkReportConfigVal(JsonWrite *const json, const String *const optionName, cons
             else
             {
                 ASSERT(strLstSize(valueList) == 1);
-                jsonWriteStr(json, strLstGet(valueList, 0));
+
+                if (cfgParseOptionSecure(option.id))
+                    jsonWriteStr(json, strNewFmt("<%s>", strZ(optionName)));
+                else
+                    jsonWriteStr(json, strLstGet(valueList, 0));
             }
         }
 
diff --git a/test/src/module/command/checkTest.c b/test/src/module/command/checkTest.c
index 95817b949a..25be7c900d 100644
--- a/test/src/module/command/checkTest.c
+++ b/test/src/module/command/checkTest.c
@@ -38,6 +38,8 @@ testRun(void)
             storageTest, "pgbackrest.conf",
             "[global]\n"
             "repo1-path=" TEST_PATH "/repo1\n"
+            "repo1-cipher-type=aes-256-cbc\n"
+            "repo1-cipher-pass=ULmO7pKuimOzPEqHH9HUqQln\n"
             "repo1-block=y\n"
             "no-repo1-block=bogus\n"
             "bogus=y\n"
@@ -156,6 +158,12 @@ testRun(void)
                                 "\"repo1-block\":{"
                                     "\"val\":\"y\""
                                 "},"
+                                "\"repo1-cipher-pass\":{"
+                                    "\"val\":\"<repo1-cipher-pass>\""
+                                "},"
+                                "\"repo1-cipher-type\":{"
+                                "\"val\":\"aes-256-cbc\""
+                                "},"
                                 "\"repo1-path\":{"
                                     "\"val\":\"" TEST_PATH "/repo1\""
                                 "}"