diff --git a/auth.ts b/auth.ts
index b90b860..2553b35 100644
--- a/auth.ts
+++ b/auth.ts
@@ -1,9 +1,10 @@
 import getEnv from "@/lib/env-entry"
 import NextAuth from "next-auth"
 import CredentialsProvider from "next-auth/providers/credentials"
+import CryptoJS from 'crypto-js'
 
 export const { handlers, signIn, signOut, auth } = NextAuth({
-  secret: process.env.AUTH_SECRET ?? "this_is_nezha_dash_web_secret",
+  secret: process.env.AUTH_SECRET ?? CryptoJS.MD5(`this_is_nezha_dash_web_secret_${getEnv("SitePassword")}`).toString(),
   trustHost: (process.env.AUTH_TRUST_HOST as boolean | undefined) ?? true,
   providers: [
     CredentialsProvider({
diff --git a/bun.lockb b/bun.lockb
index 2203b8e..578e8d1 100755
Binary files a/bun.lockb and b/bun.lockb differ
diff --git a/package.json b/package.json
index 849c928..27d4d9c 100644
--- a/package.json
+++ b/package.json
@@ -27,6 +27,7 @@
     "@radix-ui/react-switch": "^1.1.2",
     "@radix-ui/react-tooltip": "^1.1.7",
     "@trivago/prettier-plugin-sort-imports": "^5.2.2",
+    "@types/crypto-js": "^4.2.2",
     "@types/d3-geo": "^3.1.0",
     "@types/luxon": "^3.4.2",
     "babel-plugin-react-compiler": "^19.0.0-beta-e552027-20250112",
@@ -35,6 +36,7 @@
     "clsx": "^2.1.1",
     "cmdk": "^1.0.4",
     "country-flag-icons": "^1.5.14",
+    "crypto-js": "^4.2.0",
     "d3-geo": "^3.1.1",
     "d3-selection": "^3.0.0",
     "flag-icons": "^7.3.2",