diff --git a/v2/basculehttp/frontDoor.go b/v2/basculehttp/frontDoor.go
index f803895..4ab2ae6 100644
--- a/v2/basculehttp/frontDoor.go
+++ b/v2/basculehttp/frontDoor.go
@@ -91,7 +91,7 @@ func (fd *frontDoor) handleMissingCredentials(response http.ResponseWriter, err
 
 func (fd *frontDoor) handleInvalidCredentials(response http.ResponseWriter, err *bascule.InvalidCredentialsError) {
 	response.Header().Set("Content-Type", "text/plain")
-	response.WriteHeader(http.StatusBadRequest)
+	response.WriteHeader(http.StatusUnauthorized)
 	response.Write([]byte(err.Error()))
 }