diff --git a/build/Dockerfile b/build/Dockerfile
index 81b28a9b..ef333fcb 100644
--- a/build/Dockerfile
+++ b/build/Dockerfile
@@ -110,6 +110,8 @@ RUN sed -i 's/deb.debian.org/mirrors.tuna.tsinghua.edu.cn/' /etc/apt/sources.lis
                /run/kvmd \
                /tmp/kvmd-nginx \
     && touch /run/kvmd/ustreamer.sock \
+    && groupadd kvmd-selfauth \
+    && usermod -a -G kvmd-selfauth root \
 	&& apt clean \
     && rm -rf /var/lib/apt/lists/* \
     && rm -rf /tmp/lib /tmp/wheel \
diff --git a/configs/kvmd/vncpasswd b/configs/kvmd/vncpasswd
index 6c1967a0..66195bdf 100644
--- a/configs/kvmd/vncpasswd
+++ b/configs/kvmd/vncpasswd
@@ -6,4 +6,4 @@
 #
 # NEVER use the same passwords for KVMD, IPMI and VNCAuth users.
 
-admin
+admin -> admin:admin