diff --git a/CHANGES.d/20240502_102711_fl_167_nixosmodul_context_sensible_data.md b/CHANGES.d/20240502_102711_fl_167_nixosmodul_context_sensible_data.md
new file mode 100644
index 0000000..6c3b742
--- /dev/null
+++ b/CHANGES.d/20240502_102711_fl_167_nixosmodul_context_sensible_data.md
@@ -0,0 +1 @@
+- nixos.NixOSModule: Mark generated context file as sensitive (Fixes #167)
diff --git a/src/batou_ext/nixos.py b/src/batou_ext/nixos.py
index c1294f9..c6076e5 100644
--- a/src/batou_ext/nixos.py
+++ b/src/batou_ext/nixos.py
@@ -42,6 +42,7 @@ def configure(self):
             f"{self.prefix}_generated_context.nix",
             content=context,
             format_nix_code=True,
+            sensitive_data=True,
         )