diff --git a/command/inspect.go b/command/inspect.go
index f71efcf20..3a368884f 100644
--- a/command/inspect.go
+++ b/command/inspect.go
@@ -50,6 +50,11 @@ func (c *InspectCommand) Run(args []string) int {
 	} else {
 		requiredHeader := false
 		for k, v := range tpl.Variables {
+			for _, sensitive := range tpl.SensitiveVariables {
+				if ok := strings.Compare(sensitive.Default, v.Default); ok == 0 {
+					v.Default = "<sensitive>"
+				}
+			}
 			if v.Required {
 				if !requiredHeader {
 					requiredHeader = true
@@ -82,6 +87,11 @@ func (c *InspectCommand) Run(args []string) int {
 			if v.Required {
 				continue
 			}
+			for _, sensitive := range tpl.SensitiveVariables {
+				if ok := strings.Compare(sensitive.Default, v.Default); ok == 0 {
+					v.Default = "<sensitive>"
+				}
+			}
 
 			padding := strings.Repeat(" ", max-len(k))
 			output := fmt.Sprintf("  %s%s = %s", k, padding, v.Default)