diff --git a/defaults/main.yml b/defaults/main.yml
index b7ceabf..1270f25 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -6,6 +6,7 @@ mariadb:
 #    mysql:
 #      host: localhost
 #      password: foobar
+#      plugin: unix_socket # instead of password for password-less authentication
 #      priv: *.*:USAGE
   dbs: {}
 #    database:
diff --git a/tasks/main.yml b/tasks/main.yml
index fc05e35..a726203 100644
--- a/tasks/main.yml
+++ b/tasks/main.yml
@@ -28,7 +28,8 @@
     login_unix_socket: /var/run/mysqld/mysqld.sock
     name: "{{ item.key }}"
     host: "{{ item.value.host | default('localhost') }}"
-    password: "{{ item.value.password }}"
+    password: "{{ item.value.password | default(omit) }}"
+    plugin: "{{ item.value.plugin | default(omit) }}"
     priv: "{{ item.value.priv | default('*.*:USAGE') }}"
   with_dict: "{{ mariadb.users }}"