diff --git a/internal/config/config.go b/internal/config/config.go
index e3c3bbabd..b15ef21f9 100644
--- a/internal/config/config.go
+++ b/internal/config/config.go
@@ -168,6 +168,11 @@ func (config *configSchema) LogValues() {
 	}
 	cfg.Alertmanager.Servers = servers
 
+	// replace secret in Sentry DNS with 'xxx'
+	if config.Sentry.Private != "" {
+		config.Sentry.Private = hideURLPassword(config.Sentry.Private)
+	}
+
 	out, err := yaml.Marshal(cfg)
 	if err != nil {
 		log.Error(err)