diff --git a/docs/schemas.md b/docs/schemas.md
index 4064ca0..b75f524 100644
--- a/docs/schemas.md
+++ b/docs/schemas.md
@@ -105,7 +105,7 @@ print(dict(album))
 Index lookup on schema instances returns serialized datatypes.
 
 ```python
-print(type(album['release_date']))
+print(type(album.release_date))
 # <class 'str'>
 ```
 
diff --git a/typesystem/forms.py b/typesystem/forms.py
index 5035eee..a6d8929 100644
--- a/typesystem/forms.py
+++ b/typesystem/forms.py
@@ -69,6 +69,7 @@ class Form:
         input_type = self.input_type_for_field(field)
         template_name = self.template_for_field(field)
         template = self.env.get_template(template_name)
+        value = "" if input_type == "password" else value
         return template.render(
             {
                 "field_id": field_id,

Don't echo values back if `format="password"`
Just needs a tweak in `Form.render_field` to set `value=""`, and a test case.
diff --git a/tests/test_forms.py b/tests/test_forms.py
index 52f8eaf..9bb302f 100644
--- a/tests/test_forms.py
+++ b/tests/test_forms.py
@@ -24,6 +24,15 @@ def test_form_rendering():
     assert html.count("<select ") == 1
 
 
+def test_password_rendering():
+    class PasswordForm(typesystem.Schema):
+        password = typesystem.String(format="password")
+
+    form = forms.Form(PasswordForm, values={"password": "secret"})
+    html = str(form)
+    assert "secret" not in html
+
+
 def test_form_html():
     form = forms.Form(Contact)
 

pip install -e .[dev]
parse_log_pytest
requirements.txt
pytest pytest-cov pytest-xdist pytest-mock pytest-asyncio
3.9
requirements.txt
pytest --no-header -rA --tb=line --color=no -p no:cacheprovider -W ignore::DeprecationWarning
autoflake==2.3.1
babel==2.17.0
backrefs==5.8
black==25.1.0
certifi==2025.1.31
charset-normalizer==3.4.1
click==8.1.8
codecov==2.1.13
colorama==0.4.6
coverage==7.8.0
exceptiongroup==1.2.2
execnet==2.1.1
ghp-import==2.1.0
idna==3.10
importlib_metadata==8.6.1
iniconfig==2.1.0
isort==6.0.1
Jinja2==3.1.6
Markdown==3.7
MarkupSafe==3.0.2
mergedeep==1.3.4
mkdocs==1.6.1
mkdocs-get-deps==0.2.0
mkdocs-material==9.6.10
mkdocs-material-extensions==1.3.1
mypy==1.15.0
mypy-extensions==1.0.0
packaging==24.2
paginate==0.5.7
pathspec==0.12.1
platformdirs==4.3.7
pluggy==1.5.0
pyflakes==3.3.1
Pygments==2.19.1
pymdown-extensions==10.14.3
pytest==8.3.5
pytest-asyncio==0.26.0
pytest-cov==6.0.0
pytest-mock==3.14.0
pytest-xdist==3.6.1
python-dateutil==2.9.0.post0
PyYAML==6.0.2
pyyaml_env_tag==0.1
requests==2.32.3
six==1.17.0
tomli==2.2.1
-e git+https://github.com/encode/typesystem.git@765ae6dfb810d853d5a91dcbc42bfc07750fdeee#egg=typesystem
typing_extensions==4.13.0
urllib3==2.3.0
watchdog==6.0.0
zipp==3.21.0

name: typesystem
channels:
  - defaults
  - https://repo.anaconda.com/pkgs/main
  - https://repo.anaconda.com/pkgs/r
  - conda-forge
dependencies:
  - _libgcc_mutex=0.1=main
  - _openmp_mutex=5.1=1_gnu
  - ca-certificates=2025.2.25=h06a4308_0
  - ld_impl_linux-64=2.40=h12ee557_0
  - libffi=3.4.4=h6a678d5_1
  - libgcc-ng=11.2.0=h1234567_1
  - libgomp=11.2.0=h1234567_1
  - libstdcxx-ng=11.2.0=h1234567_1
  - ncurses=6.4=h6a678d5_0
  - openssl=3.0.16=h5eee18b_0
  - pip=25.0=py39h06a4308_0
  - python=3.9.21=he870216_1
  - readline=8.2=h5eee18b_0
  - setuptools=75.8.0=py39h06a4308_0
  - sqlite=3.45.3=h5eee18b_0
  - tk=8.6.14=h39e8969_0
  - tzdata=2025a=h04d1e81_0
  - wheel=0.45.1=py39h06a4308_0
  - xz=5.6.4=h5eee18b_1
  - zlib=1.2.13=h5eee18b_1
  - pip:
      - autoflake==2.3.1
      - babel==2.17.0
      - backrefs==5.8
      - black==25.1.0
      - certifi==2025.1.31
      - charset-normalizer==3.4.1
      - click==8.1.8
      - codecov==2.1.13
      - colorama==0.4.6
      - coverage==7.8.0
      - exceptiongroup==1.2.2
      - execnet==2.1.1
      - ghp-import==2.1.0
      - idna==3.10
      - importlib-metadata==8.6.1
      - iniconfig==2.1.0
      - isort==6.0.1
      - jinja2==3.1.6
      - markdown==3.7
      - markupsafe==3.0.2
      - mergedeep==1.3.4
      - mkdocs==1.6.1
      - mkdocs-get-deps==0.2.0
      - mkdocs-material==9.6.10
      - mkdocs-material-extensions==1.3.1
      - mypy==1.15.0
      - mypy-extensions==1.0.0
      - packaging==24.2
      - paginate==0.5.7
      - pathspec==0.12.1
      - platformdirs==4.3.7
      - pluggy==1.5.0
      - pyflakes==3.3.1
      - pygments==2.19.1
      - pymdown-extensions==10.14.3
      - pytest==8.3.5
      - pytest-asyncio==0.26.0
      - pytest-cov==6.0.0
      - pytest-mock==3.14.0
      - pytest-xdist==3.6.1
      - python-dateutil==2.9.0.post0
      - pyyaml==6.0.2
      - pyyaml-env-tag==0.1
      - requests==2.32.3
      - six==1.17.0
      - tomli==2.2.1
      - typing-extensions==4.13.0
      - urllib3==2.3.0
      - watchdog==6.0.0
      - zipp==3.21.0
prefix: /opt/conda/envs/typesystem

tests/test_forms.py::test_password_rendering
tests/test_forms.py::test_form_html
tests/test_forms.py::test_form_rendering tests/test_forms.py::test_forms_from_directory tests/test_forms.py::test_forms_with_directory_override
typesystem/forms.py docs/schemas.md
typesystem/forms.py docs/schemas.md