diff --git a/docker/create_user b/docker/create_user
index a327e1d..2c99a0f 100755
--- a/docker/create_user
+++ b/docker/create_user
@@ -9,8 +9,8 @@ fi
 
 if [ -z "$2" ]; then
     # password from prompt
-    htpasswd -B $PASSWORD_FILE $1
+    htpasswd -B "$PASSWORD_FILE" "$1"
 else
     # read password from command line
-    htpasswd -B -b $PASSWORD_FILE $1 $2
+    htpasswd -B -b "$PASSWORD_FILE" "$1" "$2"
 fi
diff --git a/docker/delete_user b/docker/delete_user
index c3c25ec..93d59f3 100755
--- a/docker/delete_user
+++ b/docker/delete_user
@@ -5,4 +5,4 @@ if [ -z "$1" ]; then
     exit 1
 fi
 
-htpasswd -D $PASSWORD_FILE $1
+htpasswd -D "$PASSWORD_FILE" "$1"