diff --git a/modules/programs/bash.nix b/modules/programs/bash.nix
index 0f9fd922b..742087b7d 100644
--- a/modules/programs/bash.nix
+++ b/modules/programs/bash.nix
@@ -202,7 +202,7 @@ in
             HISTCONTROL = concatStringsSep ":" cfg.historyControl;
           }
           // optionalAttrs (cfg.historyIgnore != []) {
-            HISTIGNORE = concatStringsSep ":" cfg.historyIgnore;
+            HISTIGNORE = escapeShellArg (concatStringsSep ":" cfg.historyIgnore);
           }
         ));
     in mkIf cfg.enable {