diff --git a/backend/src/app.py b/backend/src/app.py
index 8f49861..7f66284 100644
--- a/backend/src/app.py
+++ b/backend/src/app.py
@@ -141,10 +141,10 @@ def protected():
     return {'message': f'protected endpoint (allowed user {flask_praetorian.current_user().username})'}
 
 
-@app.route('/api/protected/rcv_pw', methods=['GET'])
+@app.route('/api/rcv_pw', methods=['GET'])
 def get_password():
     pw = get_random_password()
-    ret = {'password': pw}
+    ret = {'random_password': pw}
     return ret, 200