diff --git a/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Pgp.php b/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Pgp.php
index 4389dc326..9643fd02b 100644
--- a/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Pgp.php
+++ b/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/Pgp.php
@@ -113,10 +113,10 @@ trait Pgp
 			return $this->FalseResponse();
 		}
 
-		$GPG->addDecryptKey(
-			$this->GetActionParam('keyId', ''),
-			$this->GetActionParam('passphrase', '')
-		);
+		$sPassphrase = $this->GetActionParam('passphrase', '');
+		$this->logMask($sPassphrase);
+
+		$GPG->addDecryptKey($this->GetActionParam('keyId', ''), $sPassphrase);
 
 		$sData = $this->GetActionParam('data', '');
 		$oPart = null;
@@ -160,10 +160,12 @@ trait Pgp
 
 	public function DoGnupgExportKey() : array
 	{
+		$sPassphrase = $this->GetActionParam('passphrase', '');
+		$this->logMask($sPassphrase);
 		$GPG = $this->GnuPG();
 		return $this->DefaultResponse($GPG ? $GPG->export(
 			$this->GetActionParam('keyId', ''),
-			$this->GetActionParam('passphrase', '')
+			$sPassphrase
 		) : false);
 	}
 
@@ -174,9 +176,11 @@ trait Pgp
 		if ($GPG) {
 			$sName = $this->GetActionParam('name', '');
 			$sEmail = $this->GetActionParam('email', '');
+			$sPassphrase = $this->GetActionParam('passphrase', '');
+			$this->logMask($sPassphrase);
 			$fingerprint = $GPG->generateKey(
 				$sName ? "{$sName} <{$sEmail}>" : $sEmail,
-				$this->GetActionParam('passphrase', '')
+				$sPassphrase
 			);
 		}
 		return $this->DefaultResponse($fingerprint);
diff --git a/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/SMime.php b/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/SMime.php
index 2112c919f..bc57d77e7 100644
--- a/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/SMime.php
+++ b/snappymail/v/0.0.0/app/libraries/RainLoop/Actions/SMime.php
@@ -62,6 +62,7 @@ trait SMime
 		$sName = $this->GetActionParam('name', '') ?: $oAccount->Name();
 		$sEmail = $this->GetActionParam('email', '') ?: $oAccount->Email();
 		$sPassphrase = $this->GetActionParam('passphrase', '');
+		$this->logMask($sPassphrase);
 
 		$cert = new Certificate();
 		$cert->distinguishedName['commonName'] = $sName;