diff --git a/xiaomusic/httpserver.py b/xiaomusic/httpserver.py
index 9cf3aae..d83c831 100644
--- a/xiaomusic/httpserver.py
+++ b/xiaomusic/httpserver.py
@@ -399,7 +399,7 @@ def access_key_verification(file_path, key, code):
     if code is not None:
         current_code_bytes = code.encode("utf8")
         correct_code_bytes = (
-            hashlib.md5(
+            hashlib.sha256(
                 (
                     file_path + config.httpauth_username + config.httpauth_password
                 ).encode("utf-8")