diff --git a/.env_sample b/.env_sample
index d9bcd96..6fdfb3a 100644
--- a/.env_sample
+++ b/.env_sample
@@ -1,7 +1,7 @@
 secret=please_please_update_me_please
 algorithm=HS256
-# expiry time in milliseconds
-jwt_expiry_time=3_600_000 # 1 hour
+# expiry time in milliseconds (3600000 = 1 hour)
+jwt_expiry_time=3600000  
 
 # login password
 login_password=12345678
diff --git a/app/routers/setup.py b/app/routers/setup.py
index c0d1bb1..ae5bb18 100644
--- a/app/routers/setup.py
+++ b/app/routers/setup.py
@@ -167,7 +167,7 @@ async def setup_start_done(data: StartDoneData):
         )
 
     #### RECOVERY ####
-    elif setupPhase == "recovery":
+    elif setupPhase == "recovery" or setupPhase == "update":
         logging.warning(f"check recovery data")
         if password_valid(data.passwordA) == False:
             logging.warning(f"passwordA is not valid")