diff --git a/ChangeLog b/ChangeLog
index 0db4cf9b27..86f99d26a9 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,17 @@
+1885.	[func]		andrei
+	kea-admin is now able to interactively ask for a password if no
+	parameter follows the -p or the --password parameters. This
+	requires the user to give it as the last parameter. If another
+	option starting with dash follows, that would be taken as the
+	actual password, would not be processed as it should have been
+	and all your parameters will be offset by one. Checking if the
+	word that follows starts with dash is also not possible because
+	that would not allow for passwords starting with dash. Feedback
+	of the password to the terminal is cut off to prevent
+	over-the-shoulder snooping and other social engineering
+	techniques.
+	(Gitlab #1675)
+
 1884.	[doc]		fdupont
 	HTTP_CONNECTION_HANDSHAKE_FAILED log message got a
 	description.