diff --git a/CHANGELOG b/CHANGELOG
index f84b476..17971e5 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -13,6 +13,7 @@ CHANGES:
 	- Fixed segfault when encoding just one block, fixes #51.
 		The normal code was never affected by this.
 	- Added win32 code to read DNS server from system, fixes #45.
+	- Disabled password echo on win32, fixes #44.
 
 2009-01-23: 0.5.0 "iPassed"
 	- Fixed segfault in server when sending version reject.
diff --git a/README-win32.txt b/README-win32.txt
index 38d3074..e3de50a 100644
--- a/README-win32.txt
+++ b/README-win32.txt
@@ -48,12 +48,12 @@ cross-compile.
 
 == Results of crappy Win32 API:
 The following fixable limitations apply:
-- The password is shown when entered
 - Exactly one TAP32 interface must be installed
 - The TAP32 interface must be named "dns" and be version 0801
 - Server cannot read packet destination address
 
 The following (probably) un-fixable limitations apply:
+- A password entered as -P argument can be shown in process list
 - Priviligies cannot be dropped
 - chroot() cannot be used
 - Detaching from terminal not possible