diff --git a/presto-bigquery/src/main/java/io/prestosql/plugin/bigquery/BigQueryConfig.java b/presto-bigquery/src/main/java/io/prestosql/plugin/bigquery/BigQueryConfig.java
index 2db7edc3eab8c..2166da4b0a79d 100644
--- a/presto-bigquery/src/main/java/io/prestosql/plugin/bigquery/BigQueryConfig.java
+++ b/presto-bigquery/src/main/java/io/prestosql/plugin/bigquery/BigQueryConfig.java
@@ -16,6 +16,7 @@
 import com.google.auth.oauth2.GoogleCredentials;
 import io.airlift.configuration.Config;
 import io.airlift.configuration.ConfigDescription;
+import io.airlift.configuration.ConfigSecuritySensitive;
 import io.airlift.configuration.validation.FileExists;
 
 import javax.validation.constraints.AssertTrue;
@@ -66,6 +67,7 @@ public Optional<String> getCredentialsKey()
 
     @Config("bigquery.credentials-key")
     @ConfigDescription("The base64 encoded credentials key")
+    @ConfigSecuritySensitive
     public BigQueryConfig setCredentialsKey(String credentialsKey)
     {
         this.credentialsKey = Optional.of(credentialsKey);