diff --git a/src/nassella.scm b/src/nassella.scm
index ab83c74..a3b328d 100644
--- a/src/nassella.scm
+++ b/src/nassella.scm
@@ -891,17 +891,25 @@ chmod -R 777 /opt/keys")))
        (VStack
         (Fieldset
          (@ (title "Cloudflare"))
-         (Field (@ (name "cloudflare-api-token") (label ("API Token")) (value ,(alist-ref 'cloudflare-api-token config))))
-         (Field (@ (name "cloudflare-zone-id") (label ("Zone ID")) (value ,(alist-ref 'cloudflare-zone-id config))))
-         (Field (@ (name "cloudflare-account-id") (label ("Account ID")) (value ,(alist-ref 'cloudflare-account-id config)))))
+         (Field (@ (name "cloudflare-api-token") (label ("API Token")) (type "password")
+                   (value ,(alist-ref 'cloudflare-api-token config))))
+         (Field (@ (name "cloudflare-zone-id") (label ("Zone ID")) (type "password")
+                   (value ,(alist-ref 'cloudflare-zone-id config))))
+         (Field (@ (name "cloudflare-account-id") (label ("Account ID")) (type "password")
+                   (value ,(alist-ref 'cloudflare-account-id config)))))
         (Fieldset
          (@ (title "DigitalOcean"))
-         (Field (@ (name "digitalocean-api-token") (label ("API Token")) (value ,(alist-ref 'digitalocean-api-token config)))))
+         (Field (@ (name "digitalocean-api-token") (label ("API Token")) (type "password")
+                   (value ,(alist-ref 'digitalocean-api-token config)))))
         (Fieldset
          (@ (title "Backblaze"))
-         (Field (@ (name "backblaze-application-key") (label ("Application Key")) (value ,(alist-ref 'backblaze-application-key config))))
-         (Field (@ (name "backblaze-key-id") (label ("Key ID")) (value ,(alist-ref 'backblaze-key-id config))))
-         (Field (@ (name "backblaze-bucket-url") (label ("Bucket URL")) (value ,(alist-ref 'backblaze-bucket-url config)))))
+         (Field (@ (name "backblaze-application-key") (label ("Application Key"))
+                   (type "password")
+                   (value ,(alist-ref 'backblaze-application-key config))))
+         (Field (@ (name "backblaze-key-id") (label ("Key ID")) (type "password")
+                   (value ,(alist-ref 'backblaze-key-id config))))
+         (Field (@ (name "backblaze-bucket-url") (label ("Bucket URL")) (type "password")
+                   (value ,(alist-ref 'backblaze-bucket-url config)))))
         (Form-Nav)))))))
 
 (post "/config/wizard/services-submit/:id"