diff --git a/crates/core/src/database/auth.rs b/crates/core/src/database/auth.rs
index 27e45a6..b875e8b 100644
--- a/crates/core/src/database/auth.rs
+++ b/crates/core/src/database/auth.rs
@@ -569,7 +569,7 @@ impl DataManager {
         };
 
         // return
-        Ok((secret, qr, recovery))
+        Ok((totp.get_secret_base32(), qr, recovery))
     }
 
     pub async fn cache_clear_user(&self, user: &User) {