diff --git a/basic_auth.go b/basic_auth.go
index <HASH>..<HASH> 100644
--- a/basic_auth.go
+++ b/basic_auth.go
@@ -53,9 +53,9 @@ func (b *basicAuth) authenticate(r *http.Request) bool {
 		return false
 	}
 
-	// In simple mode, prevent authentication with empty credentials if User or
-	// Password is not set.
-	if b.opts.AuthFunc == nil && (b.opts.User == "" || b.opts.Password == "") {
+	// In simple mode, prevent authentication with empty credentials if User is
+	// not set. Allow empty passwords to support non-password use-cases.
+	if b.opts.AuthFunc == nil && b.opts.User == "" {
 		return false
 	}
[bugfix] Allow empty passwords again. Reverts part of <I>e9a2b<I>.