diff --git a/server/sources.go b/server/sources.go
index bb3d5d31b..346896cd8 100644
--- a/server/sources.go
+++ b/server/sources.go
@@ -27,6 +27,9 @@ func newSourceResponse(src chronograf.Source) sourceResponse {
 		src.Telegraf = "telegraf"
 	}
 
+	// Omit the password on response
+	src.Password = ""
+
 	httpAPISrcs := "/chronograf/v1/sources"
 	return sourceResponse{
 		Source: src,