diff --git a/app/Models/User.php b/app/Models/User.php
index 0d9766a6d..1bef85b47 100644
--- a/app/Models/User.php
+++ b/app/Models/User.php
@@ -51,11 +51,11 @@ class User extends Model implements AuthenticatableContract,
     protected $table = 'users';
 
     /**
-     * The attributes that are mass assignable.
+     * The attributes that are not mass assignable.
      *
      * @var array
      */
-    protected $fillable = ['name', 'email', 'password', 'use_totp', 'totp_secret', 'language'];
+    protected $guarded = ['id', 'remeber_token', 'created_at', 'updated_at'];
 
     /**
      * The attributes excluded from the model's JSON form.