diff --git a/secrets/install.sh b/secrets/install.sh
index 78db6fb..e3ee9c9 100755
--- a/secrets/install.sh
+++ b/secrets/install.sh
@@ -86,7 +86,7 @@ ask() {
 mask() {
   printf '%s' "$1" | awk '{ n = length($0)
     if (n <= 20) printf "%s (%d chars)", "(too short)", n
-    else printf "%s**%s (%d chars)", substr($0, 1, 10), substr($0, n - 9), n }'
+    else printf "%s**********%s (first 10 + last 10 of %d chars)", substr($0, 1, 10), substr($0, n - 9), n }'
 }
 
 if [ -z "$OP_SERVICE_ACCOUNT_TOKEN" ] && [ -f "$SECRETS_ENV" ]; then