diff --git a/users.go b/users.go
index e8927e9..3010cec 100644
--- a/users.go
+++ b/users.go
@@ -185,7 +185,7 @@ func (u UserService) create(e *entity, dummy string, claims *Claims) *appError {
 	ct := currentTime()
 	user.CreatedAt = ct
 	user.UpdatedAt = ct
-	hash, err := bcrypt.GenerateFromPassword([]byte(user.Password), 10)
+	hash, err := bcrypt.GenerateFromPassword([]byte(user.Password), 12)
 	if err != nil {
 		return newJSONError(err, http.StatusInternalServerError)
 	}