diff --git a/crates/backend/src/controller/user.rs b/crates/backend/src/controller/user.rs
index e8b8657..d28c557 100644
--- a/crates/backend/src/controller/user.rs
+++ b/crates/backend/src/controller/user.rs
@@ -67,7 +67,7 @@ impl UserController {
             .await
             .map_err(ErrorInternalServerError)?
             .ok_or(ErrorNotFound("Not Found"))?;
-        Ok(web::Json(user))
+        Ok(web::Json(UserWithoutPassword::from(user)))
     }
 
     pub async fn create_user(