diff --git a/manifests/init.pp b/manifests/init.pp
index 14be7a5..98fe139 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -49,6 +49,7 @@
   $unix_sock_dir             = $::libvirt::params::unix_sock_dir,
   # qemu.conf options
   $qemu_vnc_listen           = undef,
+  $qemu_vnc_password         = undef,
   $qemu_vnc_sasl             = undef,
   $qemu_vnc_tls              = undef,
   $qemu_set_process_name     = undef,
diff --git a/templates/qemu.conf.erb b/templates/qemu.conf.erb
index 2f183b2..5cbf03f 100644
--- a/templates/qemu.conf.erb
+++ b/templates/qemu.conf.erb
@@ -74,6 +74,9 @@ vnc_tls = 0
 # example here before you set this.
 #
 # vnc_password = "XYZ12345"
+<% if @qemu_vnc_password -%>
+vnc_password = "<%= @qemu_vnc_password %>"
+<% end -%>
 
 
 # Enable use of SASL encryption on the VNC server. This requires