diff --git a/auth.ts b/auth.ts
index 4f2ec3d..7ebb84c 100644
--- a/auth.ts
+++ b/auth.ts
@@ -1,12 +1,12 @@
 import getEnv from "@/lib/env-entry"
-import CryptoJS from "crypto-js"
+import bcrypt from "bcrypt"
 import NextAuth from "next-auth"
 import CredentialsProvider from "next-auth/providers/credentials"
 
 export const { handlers, signIn, signOut, auth } = NextAuth({
   secret:
     process.env.AUTH_SECRET ??
-    CryptoJS.MD5(`this_is_nezha_dash_web_secret_${getEnv("SitePassword")}`).toString(),
+    bcrypt.hashSync(`this_is_nezha_dash_web_secret_${getEnv("SitePassword")}`, 10),
   trustHost: (process.env.AUTH_TRUST_HOST as boolean | undefined) ?? true,
   providers: [
     CredentialsProvider({
diff --git a/package.json b/package.json
index 3ac254d..990a935 100644
--- a/package.json
+++ b/package.json
@@ -57,7 +57,8 @@
     "sharp": "^0.33.5",
     "swr": "^2.3.3",
     "tailwind-merge": "^2.6.0",
-    "tailwindcss-animate": "^1.0.7"
+    "tailwindcss-animate": "^1.0.7",
+    "bcrypt": "^5.1.1"
   },
   "devDependencies": {
     "@biomejs/biome": "1.9.4",