diff --git a/releasenotes/notes/mask-configuration-passwords-317ff6d2415b2ca1.yaml b/releasenotes/notes/mask-configuration-passwords-317ff6d2415b2ca1.yaml
new file mode 100644
index 0000000000..81ab979067
--- /dev/null
+++ b/releasenotes/notes/mask-configuration-passwords-317ff6d2415b2ca1.yaml
@@ -0,0 +1,3 @@
+---
+security:
+  - Configuration show masks any password values.
diff --git a/trove/configuration/views.py b/trove/configuration/views.py
index 336157ba32..d9b09c19a9 100644
--- a/trove/configuration/views.py
+++ b/trove/configuration/views.py
@@ -13,6 +13,8 @@
 #    License for the specific language governing permissions and limitations
 #    under the License.
 
+from oslo_utils import strutils
+
 
 class ConfigurationView(object):
 
@@ -93,7 +95,7 @@ class DetailedConfigurationView(object):
             "id": self.configuration.id,
             "name": self.configuration.name,
             "description": self.configuration.description,
-            "values": values,
+            "values": strutils.mask_dict_password(values),
             "created": self.configuration.created,
             "updated": self.configuration.updated,
             "instance_count":