diff --git a/cinder/coordination.py b/cinder/coordination.py
index fc5e2e4f47e..16db53b494a 100644
--- a/cinder/coordination.py
+++ b/cinder/coordination.py
@@ -38,6 +38,7 @@ LOG = log.getLogger(__name__)
 
 coordination_opts = [
     cfg.StrOpt('backend_url',
+               secret=True,
                default='file://$state_path',
                help='The backend URL to use for distributed coordination.'),
 ]
diff --git a/releasenotes/notes/bug-2012246-292d7d93260a1fe5.yaml b/releasenotes/notes/bug-2012246-292d7d93260a1fe5.yaml
new file mode 100644
index 00000000000..8b43d74b9a2
--- /dev/null
+++ b/releasenotes/notes/bug-2012246-292d7d93260a1fe5.yaml
@@ -0,0 +1,6 @@
+---
+fixes:
+  - |
+    `Bug #2008017 <https://bugs.launchpad.net/cinder/+bug/2012246>`_: Hide
+    value of the `[coordination] backend_url` option from logs because it can
+    contain credential.