diff --git a/handlers/keys/keys.py b/handlers/keys/keys.py
index 931a5b45..8ee7fbd1 100644
--- a/handlers/keys/keys.py
+++ b/handlers/keys/keys.py
@@ -1,4 +1,5 @@
 import asyncio
+import html
 import locale
 import os
 import time
@@ -155,7 +156,7 @@ def build_keys_response(records):
             client_id = record["client_id"]
             expiry_time = record.get("expiry_time")
 
-            key_display = alias.strip() if alias else email
+            key_display = html.escape(alias.strip() if alias else email)
 
             if expiry_time:
                 expiry_date_full = datetime.fromtimestamp(expiry_time / 1000, tz=moscow_tz)