diff --git a/src/core/admin/users.go b/src/core/admin/users.go
index d6a266f..97b52be 100644
--- a/src/core/admin/users.go
+++ b/src/core/admin/users.go
@@ -3,7 +3,7 @@ package admin
 import (
 	"crypto/rand"
 	"database/sql"
-	"encoding/hex"
+	"encoding/base64"
 	"fmt"
 	"math/big"
 
@@ -220,7 +220,7 @@ func hashPassword(password string) string {
 
 // encodeBase64Raw encodes to raw URL-safe base64 (no padding).
 func encodeBase64Raw(data []byte) string {
-	return hex.EncodeToString(data)
+	return base64.RawURLEncoding.EncodeToString(data)
 }
 
 // GetDB returns the underlying database connection for sync operations.