diff --git a/backend/database.js b/backend/database.js
index fa3200b..7188c31 100644
--- a/backend/database.js
+++ b/backend/database.js
@@ -131,7 +131,11 @@ function createDefaultAdmin() {
   const adminExists = db.prepare('SELECT id FROM users WHERE is_admin = 1').get();
 
   if (!adminExists) {
-    const hashedPassword = bcrypt.hashSync('admin123', 10);
+    // 从环境变量读取管理员账号密码，如果没有则使用默认值
+    const adminUsername = process.env.ADMIN_USERNAME || 'admin';
+    const adminPassword = process.env.ADMIN_PASSWORD || 'admin123';
+
+    const hashedPassword = bcrypt.hashSync(adminPassword, 10);
 
     db.prepare(`
       INSERT INTO users (
@@ -139,8 +143,8 @@ function createDefaultAdmin() {
         is_admin, is_active, has_ftp_config
       ) VALUES (?, ?, ?, ?, ?, ?)
     `).run(
-      'admin',
-      'admin@example.com',
+      adminUsername,
+      `${adminUsername}@example.com`,
       hashedPassword,
       1,
       1,
@@ -148,8 +152,8 @@ function createDefaultAdmin() {
     );
 
     console.log('默认管理员账号已创建');
-    console.log('用户名: admin');
-    console.log('密码: admin123');
+    console.log('用户名:', adminUsername);
+    console.log('密码: ********');
     console.log('⚠️  请登录后立即修改密码！');
   }
 }