diff --git a/pkg/cfg/cluster.go b/pkg/cfg/cluster.go
index 98374c3..7d2a28a 100644
--- a/pkg/cfg/cluster.go
+++ b/pkg/cfg/cluster.go
@@ -113,7 +113,7 @@ func (cluster *Cluster) CheckAuth() error {
 			cluster.Pass = pass
 		} else {
 			// k, try interactively
-			fmt.Printf("Enter password for elasticsearch user %s@%s: ", cluster.User, cluster.Name)
+			fmt.Fprintf(os.Stderr, "Enter password for elasticsearch user %s@%s: ", cluster.User, cluster.Name)
 			pass, err := term.ReadPassword(int(syscall.Stdin))
 			if err != nil {
 				return err