diff --git a/exec/lib/Settings.php b/exec/lib/Settings.php
index 5883473..73c218e 100644
--- a/exec/lib/Settings.php
+++ b/exec/lib/Settings.php
@@ -143,7 +143,7 @@ final class Settings
 
     public function auditClientIp(string $clientIp): string
     {
-        return $this->ipMask() ? 'MASLED' : $clientIp;
+        return $this->ipMask() ? 'MASKED' : $clientIp;
     }
 
     public function sourceServerName(): string
diff --git a/plugin-settings.conf b/plugin-settings.conf
index ff2399c..351ef38 100644
--- a/plugin-settings.conf
+++ b/plugin-settings.conf
@@ -24,7 +24,7 @@ LOGIN_KEY_TTL=30
 # 1 = przypnij URL do IP przeglądarki użytkownika, 0 = nie przypinaj do IP.
 USER_IP_BOUND=1
 
-# 1 = maskuj IP użytkownika w audit.log jako MASLED, 0 = zapisuj rzeczywiste IP.
+# 1 = maskuj IP użytkownika w audit.log jako MASKED, 0 = zapisuj rzeczywiste IP.
 # To ustawienie nie zmienia IP przekazywanego do DirectAdmin przez --ip.
 IP_MASK=1
 
diff --git a/tests/settings_test.php b/tests/settings_test.php
index 1b4b8ae..9daab50 100644
--- a/tests/settings_test.php
+++ b/tests/settings_test.php
@@ -9,7 +9,7 @@ test('settings expose secure defaults from plugin-settings.conf', function (): v
     assert_same(30, $settings->loginKeyTtl());
     assert_true($settings->userIpBound());
     assert_true($settings->ipMask());
-    assert_same('MASLED', $settings->auditClientIp('198.51.100.10'));
+    assert_same('MASKED', $settings->auditClientIp('198.51.100.10'));
     assert_true($settings->defaultEnable());
     assert_same('login_url', $settings->method());
     assert_same(1, $settings->mxLoginMode());