diff --git a/CHANGELOG.md b/CHANGELOG.md
index 4fd0559..41932a0 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 ## Development
 
+## v0.2.1 (2021-01-21)
+* Fixed bug with `initial_password` in `ipa_user`.
+  Contributed by Nick Maludy (@nmaludy)
+
 ## v0.2.0 (2021-01-21)
 * Added new resources `ipa::user` and `ipa_user` to manage IPA users and their home directories.
   Contributed by Nick Maludy (@nmaludy)
diff --git a/lib/puppet/provider/ipa_user/default.rb b/lib/puppet/provider/ipa_user/default.rb
index 93571df..1807ccc 100644
--- a/lib/puppet/provider/ipa_user/default.rb
+++ b/lib/puppet/provider/ipa_user/default.rb
@@ -93,7 +93,7 @@ def flush_instance
 
       # the user doesn't exist exist. only set the password on add/create
       if cached_instance[:ensure] == :absent
-        body['params'][1]['userpassword'] = resource[:password]
+        body['params'][1]['userpassword'] = resource[:initial_password]
       end
 
       body['params'][1]['ipasshpubkey'] = resource[:sshpubkeys] if resource[:sshpubkeys]
diff --git a/metadata.json b/metadata.json
index 54dd325..02a2246 100644
--- a/metadata.json
+++ b/metadata.json
@@ -1,6 +1,6 @@
 {
   "name": "encore-ipa",
-  "version": "0.2.0",
+  "version": "0.2.1",
   "author": "Encore Technologies",
   "summary": "Manages IPA servers and clients.",
   "license": "Apache-2.0",