diff --git a/src/core/admin/users.go b/src/core/admin/users.go
index 97b52be..2b0adb3 100644
--- a/src/core/admin/users.go
+++ b/src/core/admin/users.go
@@ -218,9 +218,9 @@ func hashPassword(password string) string {
 	return fmt.Sprintf("$argon2id$v=19$m=65536,t=3,p=4$%s$%s", saltB64, hashB64)
 }
 
-// encodeBase64Raw encodes to raw URL-safe base64 (no padding).
+// encodeBase64Raw encodes to raw standard base64 (no padding), matching Authelia.
 func encodeBase64Raw(data []byte) string {
-	return base64.RawURLEncoding.EncodeToString(data)
+	return base64.RawStdEncoding.EncodeToString(data)
 }
 
 // GetDB returns the underlying database connection for sync operations.