diff --git a/components/finsh/shell.c b/components/finsh/shell.c
index 53dcd11c66..98a63bdbbf 100644
--- a/components/finsh/shell.c
+++ b/components/finsh/shell.c
@@ -309,8 +309,8 @@ static void finsh_wait_auth(void)
                 else if (ch == '\b' && cur_pos > 0)
                 {
                     /* backspace */
+		    cur_pos--;
                     password[cur_pos] = '\0';
-                    cur_pos--;
                     rt_kprintf("\b \b");
                 }
                 else if (ch == '\r' || ch == '\n')