diff --git a/bash/ovh-rescue.sh b/bash/ovh-rescue.sh
index 839aee5..d660119 100644
--- a/bash/ovh-rescue.sh
+++ b/bash/ovh-rescue.sh
@@ -119,7 +119,7 @@ function ovh-rescue-wipe-1-2TB {
     mkfs.ext4 -L 'boot' '/dev/sda2'
     # read passphrase
     local passphrase
-    read passphrase
+    read -s passphrase
     # encrypt
     echo "${passphrase}" \
     | cryptsetup \