diff --git a/dm/dm-worker-configuration-file.md b/dm/dm-worker-configuration-file.md
index 48d7012f19f8f..93e07256aff42 100644
--- a/dm/dm-worker-configuration-file.md
+++ b/dm/dm-worker-configuration-file.md
@@ -19,6 +19,7 @@ name = "worker1"
 # Log configuration.
 log-level = "info"
 log-file = "dm-worker.log"
+redact-info-log = false
 
 # DM-worker listen address.
 worker-addr = ":8262"
@@ -53,6 +54,12 @@ cert-allowed-cn = ["dm"]
 
 - Specifies the log file directory. If this parameter is not specified, the logs are printed onto the standard output.
 
+### `redact-info-log` <span class="version-mark">New in v9.0.0</span>
+
+- Controls whether to enable log redaction. When this configuration item is set to `true`, DM-worker logs are redacted to hide detailed DM query arguments. For more information, see [DM-worker Log Redaction](/log-redaction.md#log-redaction-in-DM-worker-side).
+- Default value: `false`
+- Value options: `false`, `true`
+
 #### `worker-addr`
 
 - Specifies the address of DM-worker which provides services. You can omit the IP address and specify the port number only, such as `":8262"`.
diff --git a/log-redaction.md b/log-redaction.md
index 61108e93af67a..1d5b86f56e358 100644
--- a/log-redaction.md
+++ b/log-redaction.md
@@ -70,3 +70,7 @@ To enable log redaction in the PD side, set the value of [`security.redact-info-
 ## Log redaction in TiFlash side
 
 To enable log redaction in the TiFlash side, set both the [`security.redact_info_log`](/tiflash/tiflash-configuration.md#configure-the-tiflashtoml-file) value in tiflash-server and the [`security.redact-info-log`](/tiflash/tiflash-configuration.md#configure-the-tiflash-learnertoml-file) value in tiflash-learner to `true` or `"marker"`. Both configuration values default to `false`, which means that log redaction is disabled.
+
+## Log redaction in DM-worker side
+
+To enable log redaction in the DM-worker side, set the value of [`log.redact-info-log`](/dm/dm-worker-configuration-file.md#redact-info-log-new-in-v900) to `true`. This configuration value defaults to `false`, which means that log redaction is disabled.