diff --git a/src/routes/admin.js b/src/routes/admin.js
index 5b7a0f0..f66ea6a 100644
--- a/src/routes/admin.js
+++ b/src/routes/admin.js
@@ -414,7 +414,7 @@ export async function adminRoutes(app) {
     const { password } = request.body || {}
     if (!password) return reply.status(400).send({ error: 'Password required' })
 
-    const adminId = request.adminPayload.id
+    const adminId = request.adminPayload.user_id
     const { rows: [user] } = await pool.query(
       'SELECT password_hash FROM users WHERE id = $1 AND active = true AND is_admin = true',
       [adminId]