diff --git a/modules/web_user/user.py b/modules/web_user/user.py
index 861d54331b..be499a3576 100644
--- a/modules/web_user/user.py
+++ b/modules/web_user/user.py
@@ -152,6 +152,13 @@ class User(avatar_mixin(100), DeactivableMixin, ModelSQL, ModelView):
                 user.email = email
         cls.save(users)
 
+    @classmethod
+    def copy(cls, users, default=None):
+        default = default.copy() if default is not None else {}
+        default['password_hash'] = None
+        default['reset_password_token'] = None
+        return super().copy(users, default=default)
+
     @classmethod
     def create(cls, vlist):
         users = super(User, cls).create(vlist)
diff --git a/trytond/trytond/res/user.py b/trytond/trytond/res/user.py
index 4e87ebad7a..1cd69204ce 100644
--- a/trytond/trytond/res/user.py
+++ b/trytond/trytond/res/user.py
@@ -443,7 +443,8 @@ class User(avatar_mixin(100, 'login'), DeactivableMixin, ModelSQL, ModelView):
             default = {}
         default = default.copy()
 
-        default['password'] = ''
+        default['password_hash'] = None
+        default['password_reset'] = None
         default.setdefault('warnings')
         default.setdefault('applications')