diff --git a/auth0/resource_auth0_connection.go b/auth0/resource_auth0_connection.go
index c675389d..b48b894e 100644
--- a/auth0/resource_auth0_connection.go
+++ b/auth0/resource_auth0_connection.go
@@ -181,8 +181,9 @@ func newConnection() *schema.Resource {
 							Optional: true,
 						},
 						"client_secret": {
-							Type:     schema.TypeString,
-							Optional: true,
+							Type:      schema.TypeString,
+							Optional:  true,
+							Sensitive: true,
 						},
 						"domain_aliases": {
 							Type:     schema.TypeList,