diff --git a/src/ap.c b/src/ap.c
index 8ea26a0d..162b456b 100644
--- a/src/ap.c
+++ b/src/ap.c
@@ -2568,6 +2568,7 @@ static int ap_load_profile_and_dhcp(struct ap_state *ap, bool *wait_dhcp)
 			if (strlen(passphrase) > 63) {
 				l_error("[Security].Passphrase must not exceed "
 						"63 characters");
+				l_free(passphrase);
 				return -EINVAL;
 			}