diff --git a/src/clone/Cloner.php b/src/clone/Cloner.php
index b074343e..d1fcb611 100644
--- a/src/clone/Cloner.php
+++ b/src/clone/Cloner.php
@@ -378,6 +378,10 @@ function set_site_details(): void {
 			throw new \Exception( 'Unable to get info for site ' . $this->name );
 		}
 		$this->validate_site_details( $details );
+		// The credentials go into the database copy commands, which are logged.
+		if ( method_exists( 'EE', 'obfuscate' ) ) {
+			EE::obfuscate( array_intersect_key( $details, array_flip( [ 'db_password', 'db_root_password', 'app_admin_password' ] ) ) );
+		}
 		$this->site_details = $details;
 	}