diff --git a/CHANGELOG.md b/CHANGELOG.md
index 9824f858..402bcb3b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ The **patch** part changes incrementally at each release.
 * packweb-apache: use dependencies instead of include_role for apache and php roles
 
 ### Fixed
+* mysql: use check_mode for apg command (Fix --check)
 
 ### Security
 
diff --git a/mysql/tasks/users_stretch.yml b/mysql/tasks/users_stretch.yml
index c57bd3ae..7b5499b9 100644
--- a/mysql/tasks/users_stretch.yml
+++ b/mysql/tasks/users_stretch.yml
@@ -13,6 +13,7 @@
   command: "apg -n 1 -m 16 -M lcN"
   register: mysql_admin_password
   changed_when: False
+  check_mode: False
   tags:
   - mysql
 
@@ -48,6 +49,7 @@
   command: "apg -n 1 -m 16 -M lcN"
   register: mysql_debian_password
   changed_when: False
+  check_mode: False
   tags:
   - mysql