diff --git a/app/src/main/java/at/bitfire/davdroid/ui/setup/BaseConfigurationFinder.java b/app/src/main/java/at/bitfire/davdroid/ui/setup/BaseConfigurationFinder.java
index 738f6f1f..38846b9b 100644
--- a/app/src/main/java/at/bitfire/davdroid/ui/setup/BaseConfigurationFinder.java
+++ b/app/src/main/java/at/bitfire/davdroid/ui/setup/BaseConfigurationFinder.java
@@ -85,7 +85,7 @@ public class BaseConfigurationFinder {
     // data classes
 
     @RequiredArgsConstructor
-    @ToString(exclude="logs")
+    @ToString(exclude={"logs", "authtoken", "rawPassword", "password"})
     public static class Configuration implements Serializable {
         // We have to use URI here because HttpUrl is not serializable!