diff --git a/src/x509/clu_request_setup.c b/src/x509/clu_request_setup.c
index 69939cb1..0b9a9f8b 100644
--- a/src/x509/clu_request_setup.c
+++ b/src/x509/clu_request_setup.c
@@ -688,6 +688,7 @@ int wolfCLU_requestSetup(int argc, char** argv)
 
             case WOLFCLU_HELP:
                 wolfCLU_certgenHelp();
+                wolfCLU_ForceZero(password, MAX_PASSWORD_SIZE);
                 return WOLFCLU_SUCCESS;
 
             case WOLFCLU_RSA:
@@ -1104,6 +1105,7 @@ int wolfCLU_requestSetup(int argc, char** argv)
                         ret = wolfCLU_pKeyPEMtoPriKeyEnc(keyOutBio, pkey, DES3b,
                                 pass, passwordSz);
                     }
+                    wolfCLU_ForceZero(pass, MAX_PASSWORD_SIZE);
                 }
                 else {
                     ret = wolfCLU_pKeyPEMtoPriKeyEnc(keyOutBio, pkey, DES3b,
@@ -1130,6 +1132,7 @@ int wolfCLU_requestSetup(int argc, char** argv)
     wolfSSL_BIO_free(bioOut);
     wolfSSL_X509_free(x509);
     wolfSSL_EVP_PKEY_free(pkey);
+    wolfCLU_ForceZero(password, MAX_PASSWORD_SIZE);
     return ret;
 #endif
 }