diff --git a/changes/changelog.d/oauth.enhancement b/changes/changelog.d/oauth.enhancement
new file mode 100644
index 000000000..f84e52b25
--- /dev/null
+++ b/changes/changelog.d/oauth.enhancement
@@ -0,0 +1 @@
+Client secrets are now hashed before storing them to the DB. It is only displayed once from now on!