diff --git a/src/oauth2views/account_setup.ejs b/src/oauth2views/account_setup.ejs
index be43eec60..a91af9e42 100644
--- a/src/oauth2views/account_setup.ejs
+++ b/src/oauth2views/account_setup.ejs
@@ -21,6 +21,7 @@ app.controller('Controller', [function () {}]);
     <div class="row">
         <div class="col-md-6 col-md-offset-3">
             <form action="/api/v1/session/account/setup" method="post" name="setupForm" autocomplete="off" role="form" novalidate>
+                <input type="password" style="display: none;">
                 <input type="hidden" name="_csrf" value="<%= csrf %>"/>
                 <input type="hidden" name="resetToken" value="<%= resetToken %>"/>