diff --git a/modules/home-manager/services/bleachbit.nix b/modules/home-manager/services/bleachbit.nix
index c08f1e95..89d9c1bf 100644
--- a/modules/home-manager/services/bleachbit.nix
+++ b/modules/home-manager/services/bleachbit.nix
@@ -104,7 +104,7 @@ in {
           Service = {
             Restart = "on-failure";
             ExecStart = "${pkgs.bleachbit}/bin/bleachbit --clean ${
-                lib.concatStringsSep " " cleaners
+                lib.escapeShellArgs cleaners
               }";
           };
         };