diff --git a/kernel-d-auth/auth-sdk/src/main/java/cn/stylefeng/roses/kernel/auth/auth/LoginService.java b/kernel-d-auth/auth-sdk/src/main/java/cn/stylefeng/roses/kernel/auth/auth/LoginService.java
index 1a1646ac6..decd20764 100644
--- a/kernel-d-auth/auth-sdk/src/main/java/cn/stylefeng/roses/kernel/auth/auth/LoginService.java
+++ b/kernel-d-auth/auth-sdk/src/main/java/cn/stylefeng/roses/kernel/auth/auth/LoginService.java
@@ -100,7 +100,9 @@ public class LoginService {
         Integer loginErrorCount = validatePasswordRetryTimes(loginRequest);
 
         // 2. 如果开启了验证码校验，则验证当前请求的验证码是否正确
-        validateCaptcha(loginRequest);
+        if (validatePassword) {
+            validateCaptcha(loginRequest);
+        }
 
         // 3. 解密密码的密文，需要sys_config相关配置打开
         decryptRequestPassword(loginRequest);