diff --git a/app.R b/app.R
index 253446f..cc93643 100644
--- a/app.R
+++ b/app.R
@@ -102,7 +102,7 @@ server <- function(input, output, session) {
     # check_credentials directly on sqlite db
     shinymanager::secure_server(
       check_credentials = shinymanager::check_credentials(
-        db = "auth.sqlite",
+        db = "config/auth.sqlite",
         passphrase = Sys.getenv("AUTH_DB_KEY")
       ),
       keep_token = TRUE