diff --git a/templates/azuredeploy.json b/templates/azuredeploy.json
index 6389f4c6c..c312c27fb 100644
--- a/templates/azuredeploy.json
+++ b/templates/azuredeploy.json
@@ -15,7 +15,7 @@
             }
         },
         "pgsqlAdminPassword": {
-            "type": "string",
+            "type": "securestring",
             "metadata": {
                 "description": "PostgreSQL password"
             }
diff --git a/templates/portalDeployWithLoRa.json b/templates/portalDeployWithLoRa.json
index 93f1c5cd6..45cf5a8e9 100644
--- a/templates/portalDeployWithLoRa.json
+++ b/templates/portalDeployWithLoRa.json
@@ -22,7 +22,7 @@
       }
     },
     "pgsqlAdminPassword": {
-      "type": "string",
+      "type": "securestring",
       "defaultValue": "[concat(uniqueString(resourceGroup().id, newGuid()), 'x', '!')]",
       "metadata": {
         "description": "PostgreSQL password"
diff --git a/templates/portalDeployWithoutLoRa.json b/templates/portalDeployWithoutLoRa.json
index d3d4fc93c..9f991e71f 100644
--- a/templates/portalDeployWithoutLoRa.json
+++ b/templates/portalDeployWithoutLoRa.json
@@ -22,7 +22,7 @@
       }
     },
     "pgsqlAdminPassword": {
-      "type": "string",
+      "type": "securestring",
       "defaultValue": "[concat(uniqueString(resourceGroup().id, newGuid()), 'x', '!')]",
       "metadata": {
         "description": "PostgreSQL password"