diff --git a/plan/task/transformsecret.go b/plan/task/transformsecret.go
index 262999de..c956e2e8 100644
--- a/plan/task/transformsecret.go
+++ b/plan/task/transformsecret.go
@@ -41,7 +41,7 @@ func (c *transformSecretTask) Run(ctx context.Context, pctx *plancontext.Context
 		for _, diff := range diffs {
 			if diff.Type == diffmatchpatch.DiffEqual {
 				// diffText := strings.ReplaceAll(diff.Text, ":", "") // colons are tricky. Yaml keys end with them but if a secret contained one that got replaced, the secret wouldn't get redacted
-				errStr = strings.ReplaceAll(errStr, diff.Text, "<redacted>")
+				errStr = strings.ReplaceAll(errStr, diff.Text, "***")
 			}
 		}