diff --git a/server.js b/server.js
index e9fe784..db4004d 100644
--- a/server.js
+++ b/server.js
@@ -157,7 +157,7 @@ app.post('/use-bubble', (req, res) => {
 // POST /check-password => verify "mySecretPassword"
 app.post('/check-password', (req, res) => {
     const { password } = req.body;
-    if (password !== 'mySecretPassword') {
+    if (password !== 'ParentsOnly25') {
         return res.status(403).json({ error: 'Incorrect password' });
     }
     res.json({ success: true });
@@ -166,7 +166,7 @@ app.post('/check-password', (req, res) => {
 // POST /add-points => append new false items
 app.post('/add-points', (req, res) => {
     const { password, category, amount } = req.body;
-    if (password !== 'mySecretPassword') {
+    if (password !== 'ParentsOnly25') {
         return res.status(403).json({ error: 'Wrong password' });
     }
     if (!['solo', 'together'].includes(category)) {
@@ -300,7 +300,7 @@ app.post('/unsubscribe',(req,res)=>{
 ------------------------------------------------------------------ */
 app.post('/admin/login',(req,res)=>{
     const { password }=req.body;
-    if(password!=='adminSecret'){
+    if(password!=='AdminSecret'){
         return res.status(403).json({ error:'Wrong admin password' });
     }
     res.json({ success:true });