diff --git a/provider/resource_keycloak_realm_keystore_rsa.go b/provider/resource_keycloak_realm_keystore_rsa.go
index 5c1e5f803..cf0d9c3ff 100644
--- a/provider/resource_keycloak_realm_keystore_rsa.go
+++ b/provider/resource_keycloak_realm_keystore_rsa.go
@@ -60,6 +60,7 @@ func resourceKeycloakRealmKeystoreRsa() *schema.Resource {
 			"private_key": {
 				Type:        schema.TypeString,
 				Required:    true,
+				Sensitive:   true,
 				Description: "Private RSA Key encoded in PEM format",
 			},
 			"certificate": {