diff --git a/src/secret.rs b/src/secret.rs
index 6edde97..9dabf89 100644
--- a/src/secret.rs
+++ b/src/secret.rs
@@ -89,6 +89,7 @@ pub enum SecretParseError {
 }
 
 #[derive(Debug, Clone, Eq)]
+#[cfg_attr(feature = "zeroize", derive(zeroize::Zeroize, zeroize::ZeroizeOnDrop))]
 pub enum Secret {
     /// represent a non-encoded "raw" secret
     Raw(Vec<u8>),