diff --git a/squad/api/rest.py b/squad/api/rest.py
index <HASH>..<HASH> 100644
--- a/squad/api/rest.py
+++ b/squad/api/rest.py
@@ -512,7 +512,8 @@ class PatchSourceSerializer(serializers.HyperlinkedModelSerializer):
         fields = '__all__'
         extra_kwargs = {
             'token': {'write_only': True},
-            'username': {'write_only': True}
+            'username': {'write_only': True},
+            '_password': {'write_only': True},
         }
api: rest: give write only access to _password field