diff --git a/gitlab/v4/objects.py b/gitlab/v4/objects.py
index 9e9269d7b..6b47e08db 100644
--- a/gitlab/v4/objects.py
+++ b/gitlab/v4/objects.py
@@ -1347,8 +1347,8 @@ class GroupVariableManager(CRUDMixin, RESTManager):
     _path = "/groups/%(group_id)s/variables"
     _obj_cls = GroupVariable
     _from_parent_attrs = {"group_id": "id"}
-    _create_attrs = (("key", "value"), ("protected", "variable_type"))
-    _update_attrs = (("key", "value"), ("protected", "variable_type"))
+    _create_attrs = (("key", "value"), ("protected", "variable_type", "masked"))
+    _update_attrs = (("key", "value"), ("protected", "variable_type", "masked"))
 
 
 class Group(SaveMixin, ObjectDeleteMixin, RESTObject):
@@ -4018,8 +4018,8 @@ class ProjectVariableManager(CRUDMixin, RESTManager):
     _path = "/projects/%(project_id)s/variables"
     _obj_cls = ProjectVariable
     _from_parent_attrs = {"project_id": "id"}
-    _create_attrs = (("key", "value"), ("protected", "variable_type"))
-    _update_attrs = (("key", "value"), ("protected", "variable_type"))
+    _create_attrs = (("key", "value"), ("protected", "variable_type", "masked"))
+    _update_attrs = (("key", "value"), ("protected", "variable_type", "masked"))
 
 
 class ProjectService(SaveMixin, ObjectDeleteMixin, RESTObject):