diff --git a/scripts/taler-bank/demo-withdraw-api.py b/scripts/taler-bank/demo-withdraw-api.py
index 68c7e8a..282b761 100755
--- a/scripts/taler-bank/demo-withdraw-api.py
+++ b/scripts/taler-bank/demo-withdraw-api.py
@@ -129,9 +129,11 @@ def _rand_username() -> str:
 
 
 def _rand_password() -> str:
-    # readable enough to type; no ambiguous 0/O/1/l
+    # Always embed "pleasechangeme" so users know to set their own later.
+    # Suffix: readable, no ambiguous 0/O/1/l.
     alphabet = "ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789"
-    return "".join(secrets.choice(alphabet) for _ in range(14))
+    suffix = "".join(secrets.choice(alphabet) for _ in range(8))
+    return "pleasechangeme" + suffix
 
 
 def create_personal_account() -> dict: