diff --git a/cmd/server/main.go b/cmd/server/main.go
index 8b122a7f..e353a863 100644
--- a/cmd/server/main.go
+++ b/cmd/server/main.go
@@ -35,11 +35,21 @@ func main() {
 		fmt.Fprintf(os.Stderr, "无效的 -config 路径 %q。\n若同时需要 HTTPS，请写成: ./cyberstrike-ai --https -config config.yaml（-config 后必须是 yaml 文件路径）。\n", cp)
 		os.Exit(2)
 	}
+	localConfig, err := config.EnsureLocalConfig(cp)
+	if err != nil {
+		fmt.Printf("加载配置失败: %v\n", err)
+		return
+	}
+
 	cfg, err := config.Load(cp)
 	if err != nil {
 		fmt.Printf("加载配置失败: %v\n", err)
 		return
 	}
+	if localConfig.Created {
+		cfg.Auth.GeneratedPassword = localConfig.GeneratedPassword
+		cfg.Auth.GeneratedPasswordPersisted = true
+	}
 
 	if *httpsBootstrap {
 		config.ApplyDevHTTPSBootstrap(cfg)