diff --git a/utils/.local/bin/askpass-bemenu b/utils/.local/bin/askpass-bemenu
new file mode 100755
index 0000000..ff69bb6
--- /dev/null
+++ b/utils/.local/bin/askpass-bemenu
@@ -0,0 +1,7 @@
+#!/bin/sh
+/usr/bin/bemenu \
+    --prompt "$1" \
+    --password \
+    --no-exec \
+    </dev/null
+# must close stdin, otherwise bemenu hangs