diff --git a/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs b/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
index b7530ef980..fbd0b5025c 100644
--- a/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
+++ b/src/Umbraco.Web/Install/InstallSteps/DatabaseConfigureStep.cs
@@ -61,8 +61,11 @@ namespace Umbraco.Web.Install.InstallSteps
             }
             else
             {
+                var password = string.Format("'{0}'", database.Password);
+                password = password.Replace("&", "&amp;").Replace(">", "&gt;").Replace("<", "&lt;").Replace("\"", "&quot;").Replace("'", "''");
+
                 dbContext.ConfigureDatabaseConnection(
-                    database.Server, database.DatabaseName, database.Login, string.Format("'{0}'", database.Password),
+                    database.Server, database.DatabaseName, database.Login, password,
                     database.DatabaseType.ToString());
             }
         }