diff --git a/package-lock.json b/package-lock.json
index 64fe586c..a8e6a1e9 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,7 +10,7 @@
       "license": "AGPL-3.0",
       "dependencies": {
         "ajv": "^8.18.0",
-        "basic-auth": "^2.0.1",
+        "basic-auth": "^3.0.0",
         "body-parser": "^2.0.0",
         "ejs": "^6.0.0",
         "email-addresses": "^5.0.0",
@@ -1113,15 +1113,12 @@
       }
     },
     "node_modules/basic-auth": {
-      "version": "2.0.1",
-      "resolved": "https://registry.npmjs.org/basic-auth/-/basic-auth-2.0.1.tgz",
-      "integrity": "sha512-NF+epuEdnUYVlGuhaxbbq+dvJttwLnGY+YixlXlME5KpQ5W3CnXA5cVTneY3SPbPDRkcjMbifrwmFYcClgOZeg==",
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/basic-auth/-/basic-auth-3.0.0.tgz",
+      "integrity": "sha512-B63UKsSJ2atgiSuCJvzAjpfAdFY6mYT3C0vZFlLV/81Rw2/VCs6Tp29UzkpKETB3qA2cHwuU1LjBnhUQ0WkPKw==",
       "license": "MIT",
-      "dependencies": {
-        "safe-buffer": "5.1.2"
-      },
       "engines": {
-        "node": ">= 0.8"
+        "node": ">=22"
       }
     },
     "node_modules/body-parser": {
@@ -4123,12 +4120,6 @@
         "node": ">= 18"
       }
     },
-    "node_modules/safe-buffer": {
-      "version": "5.1.2",
-      "resolved": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
-      "integrity": "sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==",
-      "license": "MIT"
-    },
     "node_modules/safe-stable-stringify": {
       "version": "2.5.0",
       "resolved": "https://registry.npmjs.org/safe-stable-stringify/-/safe-stable-stringify-2.5.0.tgz",
diff --git a/package.json b/package.json
index b89eedba..fe3dd6c4 100644
--- a/package.json
+++ b/package.json
@@ -47,7 +47,7 @@
   },
   "dependencies": {
     "ajv": "^8.18.0",
-    "basic-auth": "^2.0.1",
+    "basic-auth": "^3.0.0",
     "body-parser": "^2.0.0",
     "ejs": "^6.0.0",
     "email-addresses": "^5.0.0",
diff --git a/src/api/index.ts b/src/api/index.ts
index e30c5597..ce59da75 100644
--- a/src/api/index.ts
+++ b/src/api/index.ts
@@ -15,7 +15,7 @@
  * along with this program.  If not, see <https://www.gnu.org/licenses/>.
  */
 
-import basicAuth from 'basic-auth'
+import { parse } from 'basic-auth'
 import express from 'express'
 import { VisibleConnectedDevicesManager } from '../connected-devices'
 import { SimpleDatabase } from '../database/simple'
@@ -78,7 +78,7 @@ export const createApi = ({ database, websocket, connectedDevicesManager, eventH
         return
       }
 
-      const user = basicAuth(req)
+      const user = parse(req.headers.authorization || '')
 
       if (adminToken !== "" && user && user.pass === adminToken) {
         next()