diff --git a/pkg/websocket.go b/pkg/websocket.go
index 4b76d30..fec6e37 100644
--- a/pkg/websocket.go
+++ b/pkg/websocket.go
@@ -317,6 +317,9 @@ func (s *Server) SendWhoList() {
 	)
 
 	for _, sub := range subscribers {
+		if !sub.authenticated {
+			continue
+		}
 		usernames = append(usernames, sub.Username)
 		userSub[sub.Username] = sub
 	}