diff --git a/config/config.yml b/config/config.yml
index f981a398..e5a352b5 100644
--- a/config/config.yml
+++ b/config/config.yml
@@ -4,7 +4,7 @@ channel_threads: 1
 feed_threads: 1
 db:
   user: kemal
-  password: kemal
+  password: replacethispassword
   host: localhost
   port: 5432
   dbname: invidious
diff --git a/setup.sh b/setup.sh
index 7b708897..1a66b8fc 100755
--- a/setup.sh
+++ b/setup.sh
@@ -1,10 +1,15 @@
 #!/bin/bash
 
+dbpass=$(openssl rand -hex 20)
+
 createdb invidious
 #createuser kemal
-psql -c "CREATE USER kemal WITH PASSWORD 'kemal';"
+psql -c "CREATE USER kemal WITH PASSWORD '$dbpass';"
 psql invidious < config/sql/channels.sql
 psql invidious < config/sql/videos.sql
 psql invidious < config/sql/channel_videos.sql
 psql invidious < config/sql/users.sql
 psql invidious < config/sql/nonces.sql
+
+# change password in config file
+sed -i "s/replacethispassword/$dbpass/g" config/config.yml