diff --git a/palette b/palette
index b0cbc51..7dee7fb 100755
Binary files a/palette and b/palette differ
diff --git a/web/static/app.css b/web/static/app.css
index 1478e23..ad67cd0 100644
--- a/web/static/app.css
+++ b/web/static/app.css
@@ -241,6 +241,8 @@ td a.slug:hover { color: var(--accent); }
   flex-shrink: 0;
 }
 .pw-field .reveal:hover { color: var(--fg); }
+.pw-field .reveal .eye-slash { display: none; }
+.pw-field .reveal.off .eye-slash { display: block; }
 .pw-field svg { width: 20px; height: 20px; display: block; }
 
 /* custom URL input (#22) */
diff --git a/web/templates/new.html b/web/templates/new.html
index 70692d3..78dfa9c 100644
--- a/web/templates/new.html
+++ b/web/templates/new.html
@@ -42,7 +42,7 @@
       <h3>Protection</h3>
       <div class="protect">
         <label class="toggle"><input type="checkbox" id="haspw"> Password lock</label>
-        <div class="pw-row" id="pwrow" style="display:none"><div class="pw-field"><input type="password" id="password" placeholder="Password" autocomplete="new-password"><button type="button" class="reveal" id="pwreveal" title="Show password" tabindex="-1"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M1 12s4-7 11-7 11 7 11 7-4 7-11 7-11-7-11-7z"/><circle cx="12" cy="12" r="3"/></svg></button></div></div>
+        <div class="pw-row" id="pwrow" style="display:none"><div class="pw-field"><input type="password" id="password" placeholder="Password" autocomplete="new-password"><button type="button" class="reveal" id="pwreveal" title="Show password" tabindex="-1"><svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M1 12s4-7 11-7 11 7 11 7-4 7-11 7-11-7-11-7z"/><circle cx="12" cy="12" r="3"/><line class="eye-slash" x1="4" y1="4" x2="20" y2="20"/></svg></button></div></div>
         <label class="toggle"><input type="checkbox" id="burn"> Burn after read</label>
         <label class="toggle"><input type="checkbox" id="unlisted"> Unlisted</label>
       </div>
@@ -84,6 +84,7 @@ $('pwreveal').addEventListener('click', () => {
   const pw = $('password');
   const show = pw.type === 'password';
   pw.type = show ? 'text' : 'password';
+  $('pwreveal').classList.toggle('off', !show);
   $('pwreveal').title = show ? 'Hide password' : 'Show password';
 });