diff --git a/server/routes/auth.ts b/server/routes/auth.ts
index 3b0d7e382..a473522fa 100644
--- a/server/routes/auth.ts
+++ b/server/routes/auth.ts
@@ -730,6 +730,7 @@ authRoutes.post('/reset-password/:guid', async (req, res, next) => {
     });
   }
   user.recoveryLinkExpirationDate = null;
+  await user.setPassword(req.body.password);
   userRepository.save(user);
   logger.info('Successfully reset password', {
     label: 'API',