diff --git a/models/account.js b/models/account.js
index fc68066..788c937 100644
--- a/models/account.js
+++ b/models/account.js
@@ -31,7 +31,7 @@ NEWSCHEMA('Account').make(function(schema) {
 			builder.set(model);
 			builder.rem('password');
 			builder.rem('ispassword');
-			model.ispassword && builder.set('password', model.password.sha1());
+			model.ispassword && builder.set('password', require('crypto').createHash('sha256').update(model.password).digest('hex'));
 			builder.set('dateupdated', F.datetime);
 			builder.inc('countupdates');
 
diff --git a/models/login.js b/models/login.js
index 6575f6a..1c1b4c6 100644
--- a/models/login.js
+++ b/models/login.js
@@ -10,7 +10,7 @@ NEWSCHEMA('Login').make(function(schema) {
 		sql.select('item', 'tbl_user').make(function(builder) {
 			builder.fields('id', 'isactivated', 'isconfirmed');
 			builder.where('email', model.email);
-			builder.where('password', model.password.sha1());
+			builder.where('password', model.password.sha256());
 			builder.where('isremoved', false);
 			builder.first();
 		});