diff --git a/pkg/db/fixtures/totp.yml b/pkg/db/fixtures/totp.yml
index 68da6b7fd..e6efe37e9 100644
--- a/pkg/db/fixtures/totp.yml
+++ b/pkg/db/fixtures/totp.yml
@@ -1,5 +1,5 @@
 - id: 1
-  user_id: 1
+  user_id: 10
   secret: 'JBSWY3DPEHPK3PXP'
   enabled: true
-  url: 'otpauth://totp/Vikunja:user1?secret=JBSWY3DPEHPK3PXP&issuer=Vikunja'
+  url: 'otpauth://totp/Vikunja:user10?secret=JBSWY3DPEHPK3PXP&issuer=Vikunja'
diff --git a/pkg/webtests/caldav_test.go b/pkg/webtests/caldav_test.go
index cc4f04c37..2a3a641b9 100644
--- a/pkg/webtests/caldav_test.go
+++ b/pkg/webtests/caldav_test.go
@@ -740,9 +740,9 @@ func TestCaldavTOTPBlocksBasicAuth(t *testing.T) {
 		e, _ := setupTestEnv()
 		c, _ := createRequest(e, http.MethodGet, "", nil, nil)
 
-		// testuser1 has TOTP enabled via fixtures.
+		// testuser10 has TOTP enabled via fixtures.
 		// "12345678" is the plaintext password for all test users.
-		result, err := caldav.BasicAuth(c, testuser1.Username, "12345678")
+		result, err := caldav.BasicAuth(c, testuser10.Username, "12345678")
 		require.NoError(t, err)
 		assert.False(t, result, "BasicAuth should reject password login when user has TOTP enabled")
 	})