diff --git a/src/config.rs b/src/config.rs
index d97d7fa..6962035 100644
--- a/src/config.rs
+++ b/src/config.rs
@@ -235,7 +235,7 @@ make_config! {
         web_vault_enabled:      bool,   false,  def,    true;
 
         /// HIBP Api Key |> HaveIBeenPwned API Key, request it here: https://haveibeenpwned.com/API/Key
-        hibp_api_key:           String, false,  option;
+        hibp_api_key:           Pass,   true,   option;
 
         /// Disable icon downloads |> Set to true to disable icon downloading, this would still serve icons from
         /// $ICON_CACHE_FOLDER, but it won't produce any external network request. Needs to set $ICON_CACHE_TTL to 0,