diff --git a/.changelog/17345.txt b/.changelog/17345.txt
new file mode 100644
index 000000000..46f185d4f
--- /dev/null
+++ b/.changelog/17345.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: change token input type from text to password
+```
diff --git a/ui/app/templates/settings/tokens.hbs b/ui/app/templates/settings/tokens.hbs
index 0b275f667..fdd3cd69c 100644
--- a/ui/app/templates/settings/tokens.hbs
+++ b/ui/app/templates/settings/tokens.hbs
@@ -112,7 +112,7 @@
             <Input
               id="token-input"
               class="input"
-              @type="text"
+              @type="password"
               placeholder="{{if this.hasJWTAuthMethods "36-character token secret or JWT" "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"}}"
               {{autofocus}}
               {{on "input" (action (mut this.secret) value="target.value")}}