A keyboard for secure data entry is provided. The keyboard comprises at least one or more of data entry buttons that can be depressed by a user. For each of the data entry buttons, a button actuator is provided that is movable upon the user depressing the respective data entry button and a primary capacitive sensor is provided that is arranged to determine movement of the button actuator of the respective data entry button by capacitance sampling. The button actuator is at least partly made from a conductive material. The button actuator is coupled to a defined electric potential at least during the capacitance sampling to shield the primary capacitive sensor from eavesdropping.