diff --git a/Auth.pm b/Auth.pm
index 9b41995..e47d9e7 100644
--- a/Auth.pm
+++ b/Auth.pm
@@ -35,6 +35,8 @@ package Auth;
 use strict;
 use base qw(SystemModule);
 
+use HTML::Entities;
+
 # Custom module imports
 use AuthMethods;
 
@@ -215,6 +217,9 @@ sub valid_user {
     my $valid      = 0;
     my $methodimpl;
 
+    # clean up the password
+    $password = decode_entities($password);
+
     $self -> clear_error();
 
     # Is the user disabled?