diff --git a/Makefile b/Makefile
index e8cbceb..578c549 100644
--- a/Makefile
+++ b/Makefile
@@ -3,7 +3,7 @@ LIGHTBAR_HOST = 192.168.13.12
 LIGHTBAR_URL = http://$(LIGHTBAR_HOST)
 WEBREPL_CLI = webrepl_cli.py
 WEBREPL_HOST = $(LIGHTBAR_HOST)
-WEBREPL_PASSWORD = ultra-secret-webrepl-password
+WEBREPL_PASSWORD = secret-pw
 REPL_TTY_PATH = /dev/ttyUSB0
 
 # Include local config
@@ -19,6 +19,9 @@ LIB_UPLOAD_TARGETS := $(patsubst %.py,$(UPLOAD_CACHE_DIR)/%.py.timestamp,$(wildc
 # Default target
 .DEFAULT_GOAL := upload-reboot
 
+# Make password variable available to the environment so that it doesn't appear in the output
+export WEBREPL_PASSWORD
+
 # -- Device control
 
 # Reboot the ESP32 via REST API
@@ -46,7 +49,7 @@ upload-reboot: upload-all reboot
 
 # Pattern rules for uploading files to the ESP32 via WebREPL if they were changed since the last upload
 $(UPLOAD_CACHE_DIR)/%.py.timestamp :: %.py
-	$(WEBREPL_CLI) -p $(WEBREPL_PASSWORD) $*.py $(WEBREPL_HOST):/$(subst src/,,$*).py >/dev/null
+	$(WEBREPL_CLI) -p $$WEBREPL_PASSWORD $*.py $(WEBREPL_HOST):/$(subst src/,,$*).py >/dev/null
 	@mkdir -p $(@D) && touch $@
 
 # Create necessary directories on the ESP32 filesystem via REPL (not WebREPL!)
diff --git a/Makefile.env.example b/Makefile.env.example
index 7486047..bb6c0a9 100644
--- a/Makefile.env.example
+++ b/Makefile.env.example
@@ -5,7 +5,7 @@
 LIGHTBAR_HOST := 192.168.13.12
 
 # Password for WebREPL as set in webrepl_cfg.py (used to transfer files to the ESP32)
-WEBREPL_PASSWORD := ultra-secret-webrepl-password
+WEBREPL_PASSWORD := secret-pw
 
 # Device path to the serial port of the ESP32 when connected via USB
 REPL_TTY_PATH := /dev/ttyUSB0
diff --git a/examples/webrepl_cfg.py b/examples/webrepl_cfg.py
index 79c8566..e789e05 100644
--- a/examples/webrepl_cfg.py
+++ b/examples/webrepl_cfg.py
@@ -1,4 +1,5 @@
 # Example file for WebREPL configuration. Copy to src/webrepl_cfg.py, adjust and upload to the board.
 
 # Define the password for WebREPL here
-PASS = 'ultra-secret-webrepl-password'
+# IMPORTANT: For *some reason* WebREPL only allows passwords with a maximum length of 9 characters!
+PASS = 'secret-pw'