diff --git a/src/main/api/server-config.js b/src/main/api/server-config.js
index 907f792..6ba3470 100644
--- a/src/main/api/server-config.js
+++ b/src/main/api/server-config.js
@@ -18,7 +18,7 @@ module.exports = (auth, config, secret) => {
   app.use(expressSession({
     resave: false,
     saveUninitialized: true,
-    secret,
+    secret: secret || require('node:crypto').randomBytes(32).toString('hex'),
   }));
   app.use(auth.initialize());
   app.use(auth.session());