diff --git a/src/node/cli.ts b/src/node/cli.ts
index 7f44f9ea..a5757aa6 100644
--- a/src/node/cli.ts
+++ b/src/node/cli.ts
@@ -334,7 +334,7 @@ export const parse = (
     throw new Error("--cert-key is missing")
   }
 
-  logger.debug("parsed command line", field("args", args))
+  logger.debug(() => ["parsed command line", field("args", { ...args, password: undefined })])
 
   return args
 }