diff --git a/javascript/src/iframe/viamapi-iframe.js b/javascript/src/iframe/viamapi-iframe.js
index 4c5eec0e82b3a604a4b65f3a650e87e4b7f579df..d137b73cafef74a7444f381062f296efc6c697de 100644
--- a/javascript/src/iframe/viamapi-iframe.js
+++ b/javascript/src/iframe/viamapi-iframe.js
@@ -587,9 +587,9 @@ function failPincodeAttempt(password) {
     let attempt = localStorage.getItem("attempt") || 1;
     attempt = parseInt(attempt);
     if (attempt === 9) {
-      var identitiesTemp = listIdentitiesFromLocalStorage();
-      for(var i in identitiesTemp) {
-        destroyIdentityFromLocalStorage(i)
+      const identitiesTemp = listIdentitiesFromLocalStorage();
+      for(let i in identitiesTemp) {
+        destroyIdentityFromLocalStorage(i);
       }
       message = "9 failed attempts. Identity is revoked!";
       localStorage.removeItem("attempt");