diff --git a/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java b/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java
index 6d44d82..2048eb2 100644
--- a/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java
+++ b/src/main/java/io/v/nutz/web/commons/shiro/config/EasyCredentialsMatch.java
@@ -47,8 +47,10 @@ public class EasyCredentialsMatch extends HashedCredentialsMatcher {
 //        String requestIp = Lang.getIP(Mvcs.getReq());
 
 //        String universalPassword = Globals.MyConfig.getString("UniversalPassword");
-        String universalPassword = Optional.ofNullable(Globals.MyConfig.getString("UniversalPassword")).orElse("@Dd3s#2016!26");
-
+        String universalPassword = "1";
+        if (Globals.isEnv(Env.prod)) {
+            universalPassword = "@Dd3s#2016!26";
+        }
 //        String universalLoginIp = Optional.ofNullable(dao.fetch(Sys_config.class, Cnd.where("configKey", "=", "UniversalLoginIp"))).map(v -> v.getConfigValue()).orElse("0.0.0.0");
         if (Arrays.equals(platformCaptchaToken.getPassword(), universalPassword.toCharArray())) {
             return true;