diff --git a/src/Command/CodeStudio/CodeStudioCiCdVariables.php b/src/Command/CodeStudio/CodeStudioCiCdVariables.php
index 6f422f6d4..3a5b50bd6 100644
--- a/src/Command/CodeStudio/CodeStudioCiCdVariables.php
+++ b/src/Command/CodeStudio/CodeStudioCiCdVariables.php
@@ -20,28 +20,28 @@ public static function getDefaults(?string $cloudApplicationUuid = NULL, ?string
     return [
       [
         'key' => 'ACQUIA_APPLICATION_UUID',
-        'masked' => FALSE,
+        'masked' => TRUE,
         'protected' => FALSE,
         'value' => $cloudApplicationUuid,
         'variable_type' => 'env_var',
       ],
       [
         'key' => 'ACQUIA_CLOUD_API_TOKEN_KEY',
-        'masked' => FALSE,
+        'masked' => TRUE,
         'protected' => FALSE,
         'value' => $cloudKey,
         'variable_type' => 'env_var',
       ],
       [
         'key' => 'ACQUIA_CLOUD_API_TOKEN_SECRET',
-        'masked' => FALSE,
+        'masked' => TRUE,
         'protected' => FALSE,
         'value' => $cloudSecret,
         'variable_type' => 'env_var',
       ],
       [
         'key' => 'ACQUIA_GLAB_TOKEN_NAME',
-        'masked' => FALSE,
+        'masked' => TRUE,
         'protected' => FALSE,
         'value' => $projectAccessTokenName,
         'variable_type' => 'env_var',
diff --git a/tests/phpunit/src/CommandTestBase.php b/tests/phpunit/src/CommandTestBase.php
index 3df30847e..ab573ba7e 100644
--- a/tests/phpunit/src/CommandTestBase.php
+++ b/tests/phpunit/src/CommandTestBase.php
@@ -621,7 +621,7 @@ protected function getMockGitLabVariables(): array {
       0 => [
           'environment_scope' => '*',
           'key' => 'ACQUIA_APPLICATION_UUID',
-          'masked' => FALSE,
+          'masked' => TRUE,
           'protected' => FALSE,
           'value' => '2b3f7cf0-6602-4590-948b-3b07b1b005ef',
           'variable_type' => 'env_var',
@@ -629,7 +629,7 @@ protected function getMockGitLabVariables(): array {
       1 => [
           'environment_scope' => '*',
           'key' => 'ACQUIA_CLOUD_API_TOKEN_KEY',
-          'masked' => FALSE,
+          'masked' => TRUE,
           'protected' => FALSE,
           'value' => '111aae74-e81a-4052-b4b9-a27a62e6b6a6',
           'variable_type' => 'env_var',