diff --git a/kadmin/ank.c b/kadmin/ank.c
index 743b97c3c..5e1a58a95 100644
--- a/kadmin/ank.c
+++ b/kadmin/ank.c
@@ -119,7 +119,7 @@ add_new_key(int argc, char **argv)
 out:
     if(princ_ent)
 	krb5_free_principal(context, princ_ent);
-    if(password)
+    if(!rkey && password)
 	memset(password, 0, strlen(password));
     return 0;
 usage: