diff --git a/group/client.go b/group/client.go
index b972df6..e3d2003 100644
--- a/group/client.go
+++ b/group/client.go
@@ -28,7 +28,7 @@ type Password RawPassword
 func (p Password) Match(pw string) (bool, error) {
 	switch p.Type {
 	case "":
-		return false, errors.New("missing password")
+		return false, nil
 	case "plain":
 		if p.Key == nil {
 			return false, errors.New("missing key")
diff --git a/group/client_test.go b/group/client_test.go
index 6d3d7d6..c138041 100644
--- a/group/client_test.go
+++ b/group/client_test.go
@@ -60,10 +60,10 @@ func TestBad(t *testing.T) {
 	if match, err := pw4.Match("bad"); err != nil || match {
 		t.Errorf("pw4 matches")
 	}
-	if match, err := pw5.Match(""); err == nil || match {
+	if match, err := pw5.Match(""); err != nil || match {
 		t.Errorf("pw5 matches")
 	}
-	if match, err := pw5.Match("bad"); err == nil || match {
+	if match, err := pw5.Match("bad"); err != nil || match {
 		t.Errorf("pw5 matches")
 	}
 	if match, err := pw6.Match("bad"); err == nil || match {
@@ -72,12 +72,17 @@ func TestBad(t *testing.T) {
 }
 
 func TestEmptyKey(t *testing.T) {
-	for _, tpe := range []string{"", "plain", "pbkdf2", "bcrypt", "bad"} {
+	for _, tpe := range []string{"plain", "pbkdf2", "bcrypt", "bad"} {
 		pw := Password{Type: tpe}
 		if match, err := pw.Match(""); err == nil || match {
 			t.Errorf("empty password of type %v didn't error", tpe)
 		}
 	}
+
+	pw := Password{}
+	if match, err := pw.Match(""); err != nil || match {
+		t.Errorf("empty password empty type matched")
+	}
 }
 
 func TestJSON(t *testing.T) {