diff --git a/bin/instance b/bin/instance
index 2a7fb73..aa5667f 100644
--- a/bin/instance
+++ b/bin/instance
@@ -6,8 +6,8 @@ var app = require('../app');
 
 app.set('port', process.env.PORT || settings.webserver.port);
 
-var dbString = 'mongodb://' + settings.dbsettings.user;
-dbString = dbString + ':' + settings.dbsettings.password;
+var dbString = 'mongodb://' + encodeURIComponent(settings.dbsettings.user);
+dbString = dbString + ':' + encodeURIComponent(settings.dbsettings.password);
 dbString = dbString + '@' + settings.dbsettings.address;
 dbString = dbString + ':' + settings.dbsettings.port;
 dbString = dbString + '/' + settings.dbsettings.database;
diff --git a/scripts/benchmark.js b/scripts/benchmark.js
index f92b641..f191d5e 100644
--- a/scripts/benchmark.js
+++ b/scripts/benchmark.js
@@ -11,8 +11,8 @@ function exit(exitCode) {
   process.exit(exitCode);
 }
 
-var dbString = 'mongodb://' + settings.dbsettings.user;
-dbString = dbString + ':' + settings.dbsettings.password;
+var dbString = 'mongodb://' + encodeURIComponent(settings.dbsettings.user);
+dbString = dbString + ':' + encodeURIComponent(settings.dbsettings.password);
 dbString = dbString + '@' + settings.dbsettings.address;
 dbString = dbString + ':' + settings.dbsettings.port;
 dbString = dbString + "/IQUIDUS-BENCHMARK";
diff --git a/scripts/delete_database.js b/scripts/delete_database.js
index c96c7e4..15a29fb 100644
--- a/scripts/delete_database.js
+++ b/scripts/delete_database.js
@@ -88,7 +88,7 @@ rl.question('Are you sure you want to do this? [y/n]: ', function (deleteAnswer)
 
           const settings = require('../lib/settings');
           const mongoose = require('mongoose');
-          const dbString = `mongodb://${settings.dbsettings.user}:${settings.dbsettings.password}@${settings.dbsettings.address}:${settings.dbsettings.port}/${settings.dbsettings.database}`;
+          const dbString = `mongodb://${encodeURIComponent(settings.dbsettings.user)}:${encodeURIComponent(settings.dbsettings.password)}@${settings.dbsettings.address}:${settings.dbsettings.port}/${settings.dbsettings.database}`;
 
           console.log('Connecting to database..');
 
diff --git a/scripts/restore_backup.js b/scripts/restore_backup.js
index 03d4091..5b55677 100644
--- a/scripts/restore_backup.js
+++ b/scripts/restore_backup.js
@@ -78,7 +78,7 @@ function drop_collection(mongoose, colName, cb) {
 }
 
 function delete_database(mongoose, settings, cb) {
-  const dbString = `mongodb://${settings.dbsettings.user}:${settings.dbsettings.password}@${settings.dbsettings.address}:${settings.dbsettings.port}/${settings.dbsettings.database}`;
+  const dbString = `mongodb://${encodeURIComponent(settings.dbsettings.user)}:${encodeURIComponent(settings.dbsettings.password)}@${settings.dbsettings.address}:${settings.dbsettings.port}/${settings.dbsettings.database}`;
 
   console.log('Connecting to database..');
 
diff --git a/scripts/sync.js b/scripts/sync.js
index f1fbca4..da7821f 100644
--- a/scripts/sync.js
+++ b/scripts/sync.js
@@ -215,8 +215,8 @@ if (lib.is_locked([database]) == false) {
     if (mode == 'update')
       console.log(`Syncing ${(database == 'index' ? 'blocks' : database)}.. Please wait..`);
 
-    var dbString = 'mongodb://' + settings.dbsettings.user;
-    dbString = dbString + ':' + settings.dbsettings.password;
+    var dbString = 'mongodb://' + encodeURIComponent(settings.dbsettings.user);
+    dbString = dbString + ':' + encodeURIComponent(settings.dbsettings.password);
     dbString = dbString + '@' + settings.dbsettings.address;
     dbString = dbString + ':' + settings.dbsettings.port;
     dbString = dbString + '/' + settings.dbsettings.database;
diff --git a/scripts/update_explorer.js b/scripts/update_explorer.js
index de03d94..b3cc5d1 100644
--- a/scripts/update_explorer.js
+++ b/scripts/update_explorer.js
@@ -58,8 +58,8 @@ try {
 const db = require('../lib/database');
 const settings = require('../lib/settings');
 
-var dbString = 'mongodb://' + settings.dbsettings.user;
-dbString = dbString + ':' + settings.dbsettings.password;
+var dbString = 'mongodb://' + encodeURIComponent(settings.dbsettings.user);
+dbString = dbString + ':' + encodeURIComponent(settings.dbsettings.password);
 dbString = dbString + '@' + settings.dbsettings.address;
 dbString = dbString + ':' + settings.dbsettings.port;
 dbString = dbString + '/' + settings.dbsettings.database;