diff --git a/src/common/security/redact-sensitive.ts b/src/common/security/redact-sensitive.ts
index b035462..4014451 100644
--- a/src/common/security/redact-sensitive.ts
+++ b/src/common/security/redact-sensitive.ts
@@ -47,5 +47,11 @@ function redactValue(value: unknown): unknown {
 }
 
 function looksLikeSecret(value: string): boolean {
-  return value.length >= 24 && /^[A-Za-z0-9_./+=:-]+$/.test(value);
+  const trimmed = value.trim();
+
+  if (/[\s=;:,]/.test(trimmed)) {
+    return false;
+  }
+
+  return trimmed.length >= 32 && /^[A-Za-z0-9_./+:-]+$/.test(trimmed);
 }