diff --git a/backend/templates/html/users.html.ecr b/backend/templates/html/users.html.ecr
index c1c7ada..4523dbb 100644
--- a/backend/templates/html/users.html.ecr
+++ b/backend/templates/html/users.html.ecr
@@ -146,7 +146,7 @@
                     <tr>
                       <td>
                         <%- if student.user.password -%>
-                          <code><%= student.user.password %></code>
+                          <code><%= HTML.escape(student.user.password.not_nil!) %></code>
                         <%- else -%>
                           <i>Password geändert</i>
                         <%- end -%>
@@ -196,7 +196,7 @@
                     <tr>
                       <td>
                         <%- if teacher.password -%>
-                          <code><%= teacher.password %></code>
+                          <code><%= HTML.escape(teacher.password.not_nil!) %></code>
                         <%- else -%>
                           <i>Password geändert</i>
                         <%- end -%>