diff --git a/docker-compose.yaml b/docker-compose.yaml
index 20fd390..5c3306e 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -8,6 +8,8 @@ services:
       - /root/send-it/uploads:/app/uploads
       - /root/send-it/data:/app/data
     restart: unless-stopped
+    environment:
+      ADMIN_PASSWORD: ""
 
 networks:
   scoobydoo:
diff --git a/src/main.go b/src/main.go
index b32a4bb..700911c 100644
--- a/src/main.go
+++ b/src/main.go
@@ -105,9 +105,16 @@ func ensureAdmin() {
 	var count int64
 	db.Model(&User{}).Where("username = ?", "admin").Count(&count)
 
+	password := os.Getenv("ADMIN_PASSWORD")
+	if password == "" {
+		log.Println("WARNING: ADMIN_PASSWORD not set, using default password")
+		log.Println("MAKING NO ADMIN ACCOUNT")
+		return
+	}
+
 	if count == 0 {
 		hash, _ := bcrypt.GenerateFromPassword(
-			[]byte("change_this_password"),
+			[]byte(password),
 			bcrypt.DefaultCost,
 		)