diff --git a/vibes_auth/viewsets.py b/vibes_auth/viewsets.py
index ce13b17a..8cff1da1 100644
--- a/vibes_auth/viewsets.py
+++ b/vibes_auth/viewsets.py
@@ -69,7 +69,7 @@ class UserViewSet(
         try:
             serializer_data = ConfirmPasswordResetSerializer(request.data).data
 
-            if not compare_digest(data.get("password"), serializer_data.get("confirm_password")):
+            if not compare_digest(serializer_data.get("password"), serializer_data.get("confirm_password")):
                 return Response(
                     {"error": _("passwords do not match")},
                     status=status.HTTP_400_BAD_REQUEST,