diff --git a/apps/wolfsshd/auth.c b/apps/wolfsshd/auth.c
index 4ed6bd81a..5f3cf5a8a 100644
--- a/apps/wolfsshd/auth.c
+++ b/apps/wolfsshd/auth.c
@@ -1547,6 +1547,7 @@ static int CheckPasswordWIN(const char* usr, const byte* pw, word32 pwSz, WOLFSS
     }
 
     if (pwW != NULL) {
+        WS_FORCEZERO(pwW, (word32)((pwWSz * sizeof(WCHAR)) + sizeof(WCHAR)));
         WFREE(pwW, authCtx->heap, DYNTYPE_SSHD);
     }