diff --git a/staging/src/k8s.io/client-go/tools/clientcmd/auth_loaders.go b/staging/src/k8s.io/client-go/tools/clientcmd/auth_loaders.go
index 12331f6e65e..1d3c11d8fc0 100644
--- a/staging/src/k8s.io/client-go/tools/clientcmd/auth_loaders.go
+++ b/staging/src/k8s.io/client-go/tools/clientcmd/auth_loaders.go
@@ -23,7 +23,8 @@ import (
 	"io/ioutil"
 	"os"
 
-	"github.com/howeyc/gopass"
+	"golang.org/x/crypto/ssh/terminal"
+
 	clientauth "k8s.io/client-go/tools/auth"
 )
 
@@ -89,8 +90,12 @@ func promptForString(field string, r io.Reader, show bool) (result string, err e
 		_, err = fmt.Fscan(r, &result)
 	} else {
 		var data []byte
-		data, err = gopass.GetPasswdMasked()
-		result = string(data)
+		if terminal.IsTerminal(int(os.Stdin.Fd())) {
+			data, err = terminal.ReadPassword(int(os.Stdin.Fd()))
+			result = string(data)
+		} else {
+			return "", fmt.Errorf("error reading input for %s", field)
+		}
 	}
 	return result, err
 }