diff --git a/paas2/VERSION b/paas2/VERSION
index 2efc6321d..27934b6e0 100644
--- a/paas2/VERSION
+++ b/paas2/VERSION
@@ -1 +1 @@
-2.14.67
+2.14.68
diff --git a/paas2/login/common/encryption.py b/paas2/login/common/encryption.py
index 9524f00d6..740107ffa 100644
--- a/paas2/login/common/encryption.py
+++ b/paas2/login/common/encryption.py
@@ -75,7 +75,8 @@ def encrypt(plaintext, key="", base64=True):
     key = force_bytes(key)
     key = hashlib.md5(key).digest()
     cipher = AES.new(key, AES.MODE_ECB)
-    ciphertext = cipher.encrypt(pad(plaintext))
+    pad_text = pad(plaintext)
+    ciphertext = cipher.encrypt(pad_text.encode("utf-8"))
 
     # 将密文base64加密
     if base64:
diff --git a/paas2/release.md b/paas2/release.md
index 169727393..022fd4dbf 100644
--- a/paas2/release.md
+++ b/paas2/release.md
@@ -1,5 +1,8 @@
 Release Log
 ===============================
+# 2.14.68
+    - fix: login encrypt bk_token fail
+
 # 2.14.67 
     - esb: use cryptography==3.4.8