diff --git a/provider/resource_keycloak_realm_keystore_rsa.go b/provider/resource_keycloak_realm_keystore_rsa.go
index 79fac3587..d8727f2e9 100644
--- a/provider/resource_keycloak_realm_keystore_rsa.go
+++ b/provider/resource_keycloak_realm_keystore_rsa.go
@@ -60,6 +60,7 @@ func resourceKeycloakRealmKeystoreRsa() *schema.Resource {
 			"private_key": {
 				Type:        schema.TypeString,
 				Required:    true,
+				Sensitive:   true,
 				Description: "Private RSA Key encoded in PEM format",
 			},
 			"certificate": {