diff --git a/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php b/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php
new file mode 100644
index 0000000..8b4e0d5
--- /dev/null
+++ b/Classes/Event/Listener/BlindConfigurationOptionsEventListener.php
@@ -0,0 +1,23 @@
+<?php
+
+declare(strict_types=1);
+
+namespace WebVision\DeeplWrite\Event\Listener;
+
+use TYPO3\CMS\Core\Attribute\AsEventListener;
+use TYPO3\CMS\Lowlevel\Event\ModifyBlindedConfigurationOptionsEvent;
+
+final readonly class BlindConfigurationOptionsEventListener
+{
+    #[AsEventListener(
+        identifier: 'deepl-write/blind-configuration-options',
+    )]
+    public function __invoke(ModifyBlindedConfigurationOptionsEvent $event): void
+    {
+        $options = $event->getBlindedConfigurationOptions();
+        if ($event->getProviderIdentifier() === 'confVars') {
+            $options['TYPO3_CONF_VARS']['EXTENSIONS']['deepl_write']['apiKey'] = '******';
+        }
+        $event->setBlindedConfigurationOptions($options);
+    }
+}