diff --git a/internal/config/config.go b/internal/config/config.go
index d413c265..58b36b63 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -660,6 +660,7 @@ func getRedactedGlobalConf() globalConfig {
 		binding.OIDC.ClientSecret = getRedactedPassword(binding.OIDC.ClientSecret)
 		conf.HTTPDConfig.Bindings = append(conf.HTTPDConfig.Bindings, binding)
 	}
+	conf.KMSConfig.Secrets.MasterKeyString = getRedactedPassword(conf.KMSConfig.Secrets.MasterKeyString)
 	conf.PluginsConfig = nil
 	for _, plugin := range globalConf.PluginsConfig {
 		var args []string