diff --git a/config/application.rb b/config/application.rb
index 953fd7616..96b8ad3f4 100644
--- a/config/application.rb
+++ b/config/application.rb
@@ -66,7 +66,7 @@ module RedmineApp
     config.encoding = "utf-8"
 
     # Configure sensitive parameters which will be filtered from the log file.
-    config.filter_parameters += [:password]
+    config.filter_parameters += [:password, :salt, :twofa_totp_key]
 
     config.action_mailer.perform_deliveries = false