diff --git a/Emby.Server.Implementations/Library/DefaultPasswordResetProvider.cs b/Emby.Server.Implementations/Library/DefaultPasswordResetProvider.cs
index a589d61689..da65967434 100644
--- a/Emby.Server.Implementations/Library/DefaultPasswordResetProvider.cs
+++ b/Emby.Server.Implementations/Library/DefaultPasswordResetProvider.cs
@@ -40,7 +40,10 @@ namespace Emby.Server.Implementations.Library
             HashSet<string> usersreset = new HashSet<string>();
             foreach (var resetfile in Directory.EnumerateFiles(_passwordResetFileBaseDir, $"{_passwordResetFileBaseName}*"))
             {
-                var spr = await _jsonSerializer.DeserializeFromStreamAsync<SerializablePasswordReset>(File.OpenRead(resetfile)).ConfigureAwait(false);
+                using (var str = File.OpenRead(resetfile))
+                {
+                    var spr = await _jsonSerializer.DeserializeFromStreamAsync<SerializablePasswordReset>(str).ConfigureAwait(false);
+                }
                 if (spr.ExpirationDate < DateTime.Now)
                 {
                     File.Delete(resetfile);
@@ -51,7 +54,7 @@ namespace Emby.Server.Implementations.Library
                     if (resetUser != null)
                     {
                         await _userManager.ChangePassword(resetUser, pin).ConfigureAwait(false);
-                        usersreset.Add(resetUser.Name);
+                        usersreset.Add(resetUser.Name);
                         File.Delete(resetfile);
                     }
                 }
@@ -85,8 +88,8 @@ namespace Emby.Server.Implementations.Library
             };
 
             try
-            {
-                FileStream fileStream = File.OpenWrite(filePath);
+            {
+                FileStream fileStream = File.OpenWrite(filePath);
                 _jsonSerializer.SerializeToStream(spr,fileStream);
                 await fileStream.FlushAsync().ConfigureAwait(false);
             }