diff --git a/backend/app.py b/backend/app.py
index 0169aae..3dec1cc 100644
--- a/backend/app.py
+++ b/backend/app.py
@@ -3935,10 +3935,13 @@ async def _terraform_exec(wid: str, action: str, user: dict):
                 if ref_alias not in [a[0] for a in alias_blocks]:
                     alias_blocks.append((ref_alias, '"unknown"'))
 
+        passphrase = oci_cfg.get('pass_phrase', '')
         cred_block = f'''  tenancy_ocid     = "{oci_cfg.get('tenancy', '')}"
   user_ocid        = "{oci_cfg.get('user', '')}"
   fingerprint      = "{oci_cfg.get('fingerprint', '')}"
   private_key_path = "{oci_cfg.get('key_file', '')}"'''
+        if passphrase:
+            cred_block += f'\n  private_key_password = "{passphrase}"'
 
         # Use region from OCI config row (may differ from oci sdk config)
         with db() as c: