diff --git a/src/wuttaweb/views/users.py b/src/wuttaweb/views/users.py
index fca830f..03f5db9 100644
--- a/src/wuttaweb/views/users.py
+++ b/src/wuttaweb/views/users.py
@@ -90,6 +90,7 @@ class UserView(MasterView):  # pylint: disable=abstract-method
 
         # never show these
         g.remove("person_uuid", "role_refs", "password")
+        g.remove_filter("password")
 
         # username
         g.set_link("username")