diff --git a/backend/cmd/server/VERSION b/backend/cmd/server/VERSION
index f0cc2a729e..20f0101a2d 100644
--- a/backend/cmd/server/VERSION
+++ b/backend/cmd/server/VERSION
@@ -1 +1 @@
-0.1.108.41
+0.1.108.42
diff --git a/backend/internal/service/payment_config_service.go b/backend/internal/service/payment_config_service.go
index eab19e0452..f33505895e 100644
--- a/backend/internal/service/payment_config_service.go
+++ b/backend/internal/service/payment_config_service.go
@@ -295,19 +295,9 @@ func (s *PaymentConfigService) ListProviderInstancesWithConfig(ctx context.Conte
 }
 
 func (s *PaymentConfigService) decryptAndMaskConfig(encrypted string) map[string]string {
-	raw := s.decryptConfig(encrypted)
-	if raw == nil {
-		return nil
-	}
-	masked := make(map[string]string, len(raw))
-	for k, v := range raw {
-		if isSensitiveConfigField(k) && v != "" {
-			masked[k] = "••••••••"
-		} else {
-			masked[k] = v
-		}
-	}
-	return masked
+	// Return actual decrypted values — admin API is authenticated,
+	// frontend handles visual masking via password inputs + eye toggle.
+	return s.decryptConfig(encrypted)
 }
 
 // pendingOrderStatuses are order statuses considered "in progress" —