diff --git a/internal/settings/settings.go b/internal/settings/settings.go
index 8a81717..b650982 100644
--- a/internal/settings/settings.go
+++ b/internal/settings/settings.go
@@ -89,7 +89,10 @@ func (s *Settings) ReadYMLSettings() error {
 		return fmt.Errorf("unable to decode settings file : '%s'", err)
 	}
 
-	s.Logger.Debug("Updating settings", "settings", settings)
+	// Avoid logging sensitive fields (e.g., credentials).
+	redacted := settings
+	redacted.Settings.VcenterPassword = "REDACTED"
+	s.Logger.Debug("Updating settings", "settings", redacted)
 	s.Values = &settings
 
 	return nil