diff --git a/app/controllers/establishment_user.controller.js b/app/controllers/establishment_user.controller.js
index 8faa340..8d02875 100644
--- a/app/controllers/establishment_user.controller.js
+++ b/app/controllers/establishment_user.controller.js
@@ -227,7 +227,7 @@ exports.changeUserPassword = async (req, res) => {
     }
 
     // Find user
-    const user = await EstablishmentUser.findByPk(userId);
+    const user = await EstablishmentUser.scope("withSensitive").findByPk(userId);
     if (!user) {
       return res.status(404).send({
         status: "failed",
diff --git a/app/controllers/user.controller.js b/app/controllers/user.controller.js
index d511604..66cc8b2 100644
--- a/app/controllers/user.controller.js
+++ b/app/controllers/user.controller.js
@@ -137,7 +137,7 @@ exports.changeAdminUserPassword = async (req, res) => {
     }
 
     // Find user
-    const user = await User.findByPk(userId);
+    const user = await User.scope("withSensitive").findByPk(userId);
     if (!user) {
       return res.status(404).send({ status: "failed", message: "User not found" });
     }