diff --git a/diploi-template.yaml b/diploi-template.yaml
index c24dd95..34d7372 100644
--- a/diploi-template.yaml
+++ b/diploi-template.yaml
@@ -27,7 +27,7 @@ parameterGroups:
     - name: Initial admin password
       identifier: INITIAL_ADMIN_PASSWORD
       defaultValue: "[diploi-generate-password]"
-      type: string
+      type: secret
   - name: PostgreSQL Database
     identifier: postgres
     toggleable: true