diff --git a/src/ESP32React/SecuritySettingsService.h b/src/ESP32React/SecuritySettingsService.h
index 84910b619..c356e5d61 100644
--- a/src/ESP32React/SecuritySettingsService.h
+++ b/src/ESP32React/SecuritySettingsService.h
@@ -53,7 +53,9 @@ class SecuritySettings {
         // users
         settings.users.clear();
         if (root["users"].is<JsonArray>()) {
-            for (JsonVariant user : root["users"].as<JsonArray>()) {
+            JsonArray users = root["users"].as<JsonArray>();
+            for (size_t i = 0; i < users.size(); i++) {
+                JsonObject user = users[i].as<JsonObject>();
                 settings.users.emplace_back(user["username"], user["password"], user["admin"]);
             }
         } else {