diff --git a/blogin.sh b/blogin.sh
index 9b512b8..a2a7850 100644
--- a/blogin.sh
+++ b/blogin.sh
@@ -66,7 +66,7 @@ case "$action" in
 				hash=$(printf '%s' "$password" | argon2_hash)
 				echo "registering user $username" >&2
 				unset password
-				db_query "INSERT INTO users (username, password) VALUES ($(escape_sql_str "$username"), $(escape_sql_str "$hash")) ON CONFLICT (username) DO SET password=excluded.password" >&2
+				db_query "INSERT INTO users (username, password) VALUES ($(escape_sql_str "$username"), $(escape_sql_str "$hash")) ON CONFLICT (username) DO UPDATE SET password=excluded.password" >&2
 
 				created=true
 			else