diff --git a/docs/change-log.md b/docs/change-log.md
index 1ef8f372..069b8184 100644
--- a/docs/change-log.md
+++ b/docs/change-log.md
@@ -3,4 +3,5 @@ outline: deep
 ---
 # Change Log
 
-TODO: Once we start doing relases I'll add that here.
\ No newline at end of file
+## 2024-03-12
+* Fixed a security bug where passwords created via the CLI were stored incorrectly.
\ No newline at end of file
diff --git a/ving/cli/user.mjs b/ving/cli/user.mjs
index 07bf04e6..e53d352b 100644
--- a/ving/cli/user.mjs
+++ b/ving/cli/user.mjs
@@ -68,10 +68,11 @@ export default defineCommand({
                 username: args.add,
                 realName: args.add,
                 email: args.email,
-                password: args.password,
                 admin: args.admin,
             });
             await user.insert();
+            await user.setPassword(args.password);
+            await user.update();
             formatList([user]);
         }
         else if (args.modify) {