diff --git a/src/pki/pki.c b/src/pki/pki.c
index 8d880f066f..55b300e1aa 100644
--- a/src/pki/pki.c
+++ b/src/pki/pki.c
@@ -182,7 +182,7 @@ static shared_key_t* cb(void *data, shared_key_type_t type,
 #ifdef HAVE_GETPASS
 	secret = getpass(buf);
 #endif
-	if (secret)
+	if (secret && strlen(secret))
 	{
 		if (match_me)
 		{