diff --git a/irrd/webui/auth/endpoints.py b/irrd/webui/auth/endpoints.py
index dcb9746..a2e3215 100644
--- a/irrd/webui/auth/endpoints.py
+++ b/irrd/webui/auth/endpoints.py
@@ -384,7 +384,7 @@ async def oauth_callback(request: Request):
             email=userinfo["email"],
             oidc_sub=userinfo["sub"],
             name=userinfo["name"],
-            password=""
+            password=secrets.token_hex(24),
         )
         session_provider.session.add(user)
         session_provider.session.commit()