diff --git a/easyrsa3/easyrsa b/easyrsa3/easyrsa
index 7b227e5..ae946f0 100755
--- a/easyrsa3/easyrsa
+++ b/easyrsa3/easyrsa
@@ -479,7 +479,7 @@ current CA keypair. If you intended to start a new CA, run init-pki first."
 	echo
 	if [ "$kpass" = "$kpass2" ];
 	then
-		printf "$kpass" > "$out_key_pass_tmp"
+		printf "%s" "$kpass" > "$out_key_pass_tmp"
 	else
 		die "Passphrases do not match."
 	fi