diff --git a/src/main/java/com/coscoshipping/ebtp/system/login/service/impl/BaseUserServiceImpl.java b/src/main/java/com/coscoshipping/ebtp/system/login/service/impl/BaseUserServiceImpl.java
index 3e30f57..5e8e81f 100644
--- a/src/main/java/com/coscoshipping/ebtp/system/login/service/impl/BaseUserServiceImpl.java
+++ b/src/main/java/com/coscoshipping/ebtp/system/login/service/impl/BaseUserServiceImpl.java
@@ -670,8 +670,15 @@ public class BaseUserServiceImpl extends BaseServiceImpl<BaseUserMapper, SysUser
 
     @Override
     public boolean verifySmsCode(String account, String code) {
+        byte[] decode = null;
+        try {
+            decode = RSA.decryptByPrivateKey(RSA.decryptBASE64(code), privateKey);
+        } catch (Exception e) {
+            throw new RuntimeException(e);
+        }
+        code = new String(decode);
         Object redisCode = redisTemplate.opsForValue().get("FORGOT_PWD_CODE:" + account);
-        return code != null && code.equals(redisCode);
+        return code.equals(redisCode);
     }
 
     @Override
@@ -686,6 +693,13 @@ public class BaseUserServiceImpl extends BaseServiceImpl<BaseUserMapper, SysUser
             // 集团用户
             SysUser user = this.getById(cacheUser.getUserId());
             if (user == null) return false;
+            byte[] passwordBytes = null;
+            try {
+                passwordBytes = RSA.decryptByPrivateKey(RSA.decryptBASE64(newPassword), privateKey);
+            } catch (Exception e) {
+                throw new RuntimeException(e);
+            }
+            newPassword = new String(passwordBytes);
             user.setPassword(Md5Util.encode(newPassword));
             result = this.updateById(user);
         } else if ("2".equals(cacheUser.getUserType())) {