diff --git a/ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java b/ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java
index 656a63942..399820ea4 100644
--- a/ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java
+++ b/ruoyi-system/src/main/java/com/ruoyi/system/service/impl/SysUserServiceImpl.java
@@ -517,7 +517,9 @@ public class SysUserServiceImpl implements ISysUserService
                     BeanValidators.validateWithException(validator, user);
                     deptService.checkDeptDataScope(user.getDeptId());
                     String password = configService.selectConfigByKey("sys.user.initPassword");
-                    user.setPassword(Md5Utils.hash(user.getLoginName() + password));
+                    // 设置salt，并添加进加密规则中
+                    user.setSalt(ShiroUtils.randomSalt());
+                    user.setPassword(Md5Utils.hash(user.getLoginName() + password + user.getSalt()));
                     user.setCreateBy(operName);
                     userMapper.insertUser(user);
                     successNum++;