diff --git a/web/core/mw.py b/web/core/mw.py
index 1e005508b..98707c74d 100644
--- a/web/core/mw.py
+++ b/web/core/mw.py
@@ -431,8 +431,8 @@ def hasPwd(password):
     # import crypt
     # return crypt.crypt(password, password)
     import bcrypt
-    # salt = bcrypt.gensalt()
-    hpw = bcrypt.hashpw(password.encode('utf-8'), password.encode('utf-8'))
+    salt = bcrypt.gensalt()
+    hpw = bcrypt.hashpw(password.encode('utf-8'), salt)
     return hpw.decode('utf-8')