diff --git a/irrd/scripts/irr_rpsl_submit.py b/irrd/scripts/irr_rpsl_submit.py
index 7fde798..9ddbeeb 100755
--- a/irrd/scripts/irr_rpsl_submit.py
+++ b/irrd/scripts/irr_rpsl_submit.py
@@ -564,7 +564,12 @@ def create_http_request(requests_text, args):
         method=method,
         headers=headers,
     )
-    logger.debug("Submitting to %s; method %s}; headers %s; data %s", url, method, headers, http_data)
+    filtered_http_data = http_data
+    for password in request_body.get("passwords", []):  # pragma: no cover
+        filtered_http_data.replace(password, b"REMOVED")
+    logger.debug(
+        "Submitting to %s; method %s}; headers %s; data %s", url, method, headers, filtered_http_data
+    )
 
     return http_request