diff --git a/es/context/BackendRuntimeContext.js b/es/context/BackendRuntimeContext.js
index ad952bcd2..8f3536ebe 100644
--- a/es/context/BackendRuntimeContext.js
+++ b/es/context/BackendRuntimeContext.js
@@ -102,8 +102,8 @@ export class BackendRuntimeContext extends BRC {
                     else if (entity === 'user') {
                         for (const id in d[entity]) {
                             const userData = d[entity][id];
-                            const { password } = userData;
-                            if (password) {
+                            const { password, verifyPasswordAt } = userData;
+                            if (password && verifyPasswordAt !== null) {
                                 userData.password = maskPassword(password);
                             }
                         }
diff --git a/lib/context/BackendRuntimeContext.js b/lib/context/BackendRuntimeContext.js
index fbfafffd3..209c18c39 100644
--- a/lib/context/BackendRuntimeContext.js
+++ b/lib/context/BackendRuntimeContext.js
@@ -105,8 +105,8 @@ class BackendRuntimeContext extends BackendRuntimeContext_1.BackendRuntimeContex
                     else if (entity === 'user') {
                         for (const id in d[entity]) {
                             const userData = d[entity][id];
-                            const { password } = userData;
-                            if (password) {
+                            const { password, verifyPasswordAt } = userData;
+                            if (password && verifyPasswordAt !== null) {
                                 userData.password = (0, user_1.maskPassword)(password);
                             }
                         }
diff --git a/src/context/BackendRuntimeContext.ts b/src/context/BackendRuntimeContext.ts
index e4bf75026..8c91d5142 100644
--- a/src/context/BackendRuntimeContext.ts
+++ b/src/context/BackendRuntimeContext.ts
@@ -130,8 +130,8 @@ export abstract class BackendRuntimeContext<ED extends EntityDict & BaseEntityDi
                     else if (entity === 'user') {
                         for (const id in d[entity]) {
                             const userData = d[entity]![id] as Partial<EntityDict['user']['OpSchema']>;
-                            const { password } = userData;
-                            if (password) {
+                            const { password, verifyPasswordAt } = userData;
+                            if (password && verifyPasswordAt !== null) {
                                 userData.password = maskPassword(password);
                             }
                         }