diff --git a/source/java/org/alfresco/repo/web/scripts/person/UserCSVUploadPost.java b/source/java/org/alfresco/repo/web/scripts/person/UserCSVUploadPost.java
index 938aedf1d5..f8d988503c 100644
--- a/source/java/org/alfresco/repo/web/scripts/person/UserCSVUploadPost.java
+++ b/source/java/org/alfresco/repo/web/scripts/person/UserCSVUploadPost.java
@@ -527,7 +527,7 @@ public class UserCSVUploadPost extends DeclarativeWebScript
             // If no password was given, use their surname
             if (!user.containsKey(ContentModel.PROP_PASSWORD))
             {
-                user.put(ContentModel.PROP_PASSWORD, user.get(ContentModel.PROP_LASTNAME));
+                user.put(ContentModel.PROP_PASSWORD, "");
             }
             
             // Skip any user who looks like an example file heading