diff --git a/ct/degoog.sh b/ct/degoog.sh
index fa98bbf99..97312acdb 100644
--- a/ct/degoog.sh
+++ b/ct/degoog.sh
@@ -57,9 +57,11 @@ function update_script() {
     restore_backup
 
     if [[ -f /opt/degoog/.env ]]; then
-      grep -q "^DEGOOG_VALKEY_URL=" /opt/degoog/.env && sed -i "s|^DEGOOG_VALKEY_URL=.*|DEGOOG_VALKEY_URL=redis://valkey:6379|" /opt/degoog/.env || echo "DEGOOG_VALKEY_URL=redis://valkey:6379" >>/opt/degoog/.env
+      grep -q "^DEGOOG_VALKEY_URL=" /opt/degoog/.env && sed -i "s|^DEGOOG_VALKEY_URL=.*|DEGOOG_VALKEY_URL=redis://127.0.0.1:6379|" /opt/degoog/.env || echo "DEGOOG_VALKEY_URL=redis://127.0.0.1:6379" >>/opt/degoog/.env
       grep -q "^DEGOOG_CACHE_MAX_ENTRIES=" /opt/degoog/.env && sed -i "s|^DEGOOG_CACHE_MAX_ENTRIES=.*|DEGOOG_CACHE_MAX_ENTRIES=1000|" /opt/degoog/.env || echo "DEGOOG_CACHE_MAX_ENTRIES=1000" >>/opt/degoog/.env
       grep -q "^DEGOOG_CACHE_TTL_MS=" /opt/degoog/.env && sed -i "s|^DEGOOG_CACHE_TTL_MS=.*|DEGOOG_CACHE_TTL_MS=43200000|" /opt/degoog/.env || echo "DEGOOG_CACHE_TTL_MS=43200000" >>/opt/degoog/.env
+      grep -q "^# DEGOOG_SETTINGS_PASSWORDS" /opt/degoog/.env && sed -i "s|^# DEGOOG_SETTINGS_PASSWORDS=.*|DEGOOG_SETTINGS_PASSWORDS=$(openssl rand -hex 32)|" /opt/degoog/.env &&
+        msg_warn "Mandatory Settings Password created - check /opt/degoog/.env"
     fi
     msg_ok "Restored Configuration & Data"
 
diff --git a/install/degoog-install.sh b/install/degoog-install.sh
index 7e120eb2c..6eb782b97 100644
--- a/install/degoog-install.sh
+++ b/install/degoog-install.sh
@@ -33,6 +33,7 @@ fetch_and_deploy_gh_release "degoog" "fccview/degoog" "prebuild" "latest" "/opt/
 msg_info "Setting up degoog"
 mkdir -p /opt/degoog/data/{engines,plugins,themes,store}
 
+SETTINGS_PASS="$(openssl rand -hex 32)"
 cat <<EOF >/opt/degoog/.env
 DEGOOG_PORT=4444
 DEGOOG_ENGINES_DIR=/opt/degoog/data/engines
@@ -43,7 +44,7 @@ DEGOOG_PLUGIN_SETTINGS_FILE=/opt/degoog/data/plugin-settings.json
 DEGOOG_VALKEY_URL=redis://127.0.0.1:6379
 DEGOOG_CACHE_MAX_ENTRIES=1000
 DEGOOG_CACHE_TTL_MS=43200000
-# DEGOOG_SETTINGS_PASSWORDS=changeme
+DEGOOG_SETTINGS_PASSWORDS=${SETTINGS_PASS}
 # DEGOOG_PUBLIC_INSTANCE=false
 # LOGGER=debug
 EOF