diff --git a/data/web/inc/functions.app_passwd.inc.php b/data/web/inc/functions.app_passwd.inc.php
index 7c779b0a..9b956659 100644
--- a/data/web/inc/functions.app_passwd.inc.php
+++ b/data/web/inc/functions.app_passwd.inc.php
@@ -3,6 +3,8 @@ function app_passwd($_action, $_data = null) {
 	global $pdo;
 	global $lang;
   $_data_log = $_data;
+  !isset($_data_log['app_passwd']) ?: $_data_log['app_passwd'] = '*';
+  !isset($_data_log['app_passwd2']) ?: $_data_log['app_passwd2'] = '*';
   if (isset($_data['username']) && filter_var($_data['username'], FILTER_VALIDATE_EMAIL)) {
     if (!hasMailboxObjectAccess($_SESSION['mailcow_cc_username'], $_SESSION['mailcow_cc_role'], $_data['username'])) {
       $_SESSION['return'][] = array(