diff --git a/lib/puppet/provider/nexus3_ldap/templates/set_attributes.erb b/lib/puppet/provider/nexus3_ldap/templates/set_attributes.erb
index a8f61cf..f3a5499 100644
--- a/lib/puppet/provider/nexus3_ldap/templates/set_attributes.erb
+++ b/lib/puppet/provider/nexus3_ldap/templates/set_attributes.erb
@@ -9,7 +9,7 @@ connection.setConnectionTimeout(<%= resource[:connection_timeout] %>)
 connection.setSaslRealm('<%= resource[:sasl_realm] %>')
 connection.setAuthScheme('<%= resource[:authentication_scheme] %>')
 connection.setSystemUsername('<%= resource[:username] %>')
-connection.setSystemPassword('<%= resource[:password] %>')
+connection.setSystemPassword('<%= resource[:password].unwrap %>')
 
 ldapConfiguration.setConnection(connection)
 
@@ -36,4 +36,4 @@ mapping.setGroupSubtree(<%= resource[:group_subtree] %>)
 mapping.setLdapFilter('<%= resource[:ldap_filter] %>')
 mapping.setLdapGroupsAsRoles(<%= resource[:ldap_groups_as_roles] %>)
 
-ldapConfiguration.setMapping(mapping)
\ No newline at end of file
+ldapConfiguration.setMapping(mapping)
diff --git a/lib/puppet/type/nexus3_ldap.rb b/lib/puppet/type/nexus3_ldap.rb
index c6657ce..9a68b81 100644
--- a/lib/puppet/type/nexus3_ldap.rb
+++ b/lib/puppet/type/nexus3_ldap.rb
@@ -86,7 +86,7 @@
       default: '',
     },
     password: {
-      type: 'String',
+      type: 'Sensitive[String]',
       desc: 'The expected value of the password.',
       default: '',
     },