diff --git a/ansible/roles/cinder/defaults/main.yml b/ansible/roles/cinder/defaults/main.yml
index 473d682155595e261524d2400da2a15ab1fa635b..930beb1d7f4393a992adf78d179850f8d2f0a016 100644
--- a/ansible/roles/cinder/defaults/main.yml
+++ b/ansible/roles/cinder/defaults/main.yml
@@ -153,7 +153,6 @@ cinder_iscsi_helper: "tgtadm"
 # iscsi
 hnas_iscsi_backend: "hnas_iscsi_backend"
 hnas_iscsi_username:
-hnas_iscsi_password:
 hnas_iscsi_mgmt_ip0:
 hnas_iscsi_svc0_volume_type:
 hnas_iscsi_svc0_hdp:
@@ -162,7 +161,6 @@ hnas_iscsi_svc0_ip:
 # nfs
 hnas_nfs_backend: "hnas_nfs_backend"
 hnas_nfs_username:
-hnas_nfs_password:
 hnas_nfs_mgmt_ip0:
 hnas_nfs_svc0_volume_type:
 hnas_nfs_svc0_hdp:
@@ -173,7 +171,6 @@ hnas_nfs_svc0_hdp:
 zfssa_iscsi_backend: "zfssa_iscsi_backend"
 zfssa_iscsi_san_ip:
 zfssa_iscsi_login:
-zfssa_iscsi_password:
 zfssa_iscsi_pool:
 zfssa_iscsi_project:
 zfssa_iscsi_initiator_group:
diff --git a/doc/source/reference/cinder-guide-hnas.rst b/doc/source/reference/cinder-guide-hnas.rst
index 53d3c42f46ae003c591cf8c06d5428ac72df1cbf..827704f5c50c41ae76bcf458be19edfa24e2b93b 100644
--- a/doc/source/reference/cinder-guide-hnas.rst
+++ b/doc/source/reference/cinder-guide-hnas.rst
@@ -76,7 +76,6 @@ contents:
     volume_driver = cinder.volume.drivers.hitachi.hnas_iscsi.HNASISCSIDriver
     volume_iscsi_backend = hnas_iscsi_backend
     hnas_iscsi_username = supervisor
-    hnas_iscsi_password = supervisor
     hnas_iscsi_mgmt_ip0 = <hnas_ip>
     hnas_chap_enabled = True
 
@@ -84,6 +83,12 @@ contents:
     hnas_iscsi_svc0_hdp = FS-Baremetal1
     hnas_iscsi_svc0_iscsi_ip = <svc0_ip>
 
+Then set password for the backend in ``/etc/kolla/passwords.yml``:
+
+.. code-block:: console
+
+    hnas_iscsi_password: supervisor
+
 NFS backend
 -----------
 
@@ -105,13 +110,18 @@ add the contents:
     volume_driver = cinder.volume.drivers.hitachi.hnas_nfs.HNASNFSDriver
     volume_nfs_backend = hnas_nfs_backend
     hnas_nfs_username = supervisor
-    hnas_nfs_password = supervisor
     hnas_nfs_mgmt_ip0 = <hnas_ip>
     hnas_chap_enabled = True
 
     hnas_nfs_svc0_volume_type = nfs_gold
     hnas_nfs_svc0_hdp = <svc0_ip>/<export_name>
 
+Then set password for the backend in ``/etc/kolla/passwords.yml``:
+
+.. code-block:: console
+
+    hnas_nfs_password: supervisor
+
 Configuration on Kolla deployment
 ---------------------------------
 
diff --git a/etc/kolla/passwords.yml b/etc/kolla/passwords.yml
index 2a50e24153e0a2301ea5f67ee8302c3a1a2d60ea..ab90af9b3dc09f7369783ff5b97e4a0d728e595f 100644
--- a/etc/kolla/passwords.yml
+++ b/etc/kolla/passwords.yml
@@ -34,6 +34,17 @@ vmware_dvs_host_password:
 vmware_nsxv_password:
 vmware_vcenter_host_password:
 
+#####################
+# Hitachi NAS support
+#####################
+hnas_iscsi_password:
+hnas_nfs_password:
+
+######################
+# Oracle ZFSSA support
+######################
+zfssa_iscsi_password:
+
 ####################
 # OpenStack options
 ####################
diff --git a/releasenotes/notes/move-storage-passwords-09b5afc839284321.yaml b/releasenotes/notes/move-storage-passwords-09b5afc839284321.yaml
new file mode 100644
index 0000000000000000000000000000000000000000..cbd02f790b6db04f0734ffcb9a06881c22405aae
--- /dev/null
+++ b/releasenotes/notes/move-storage-passwords-09b5afc839284321.yaml
@@ -0,0 +1,8 @@
+---
+features:
+  - |
+    Move storage backend passwords from main.yml to /etc/kolla/passwords.yml
+upgrade:
+  - |
+    Before upgrading one needs to set Hitachi NAS and Oracle ZFSSA passwors in
+    /etc/kolla/passwords.yml file.