diff --git a/roles/ipaclient/tasks/install.yml b/roles/ipaclient/tasks/install.yml
index 53e697842265eb149388020ccbd30e936c3dc369..ed3900c6d08af37c26ae91d037584814bd181495 100644
--- a/roles/ipaclient/tasks/install.yml
+++ b/roles/ipaclient/tasks/install.yml
@@ -46,6 +46,7 @@
 # if ipaclient_use_otp is set.
 - block:
   - name: Install - Get a One-Time Password for client enrollment
+    no_log: yes
     ipahost:
       state: present
       principal: "{{ ipaadmin_principal | default('admin') }}"
@@ -61,6 +62,7 @@
     delegate_to: "{{ ipadiscovery.servers[0] }}"
 
   - name: Install - Store the previously obtained OTP
+    no_log: yes
     set_fact:
       ipaadmin_password: "{{ ipahost_output.host.randompassword if ipahost_output.host is defined }}"