diff --git a/lib/urlapi.c b/lib/urlapi.c
index b4dfdda678..1e61fbcae5 100644
--- a/lib/urlapi.c
+++ b/lib/urlapi.c
@@ -347,6 +347,7 @@ out:
   curlx_free(passwdp);
   curlx_free(optionsp);
   curlx_safefree(u->user);
+  curlx_strzero(u->password);
   curlx_safefree(u->password);
   curlx_safefree(u->options);