diff --git a/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java b/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java
index dfef8fca..d1c116c3 100644
--- a/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java
+++ b/main/manager-api/src/main/java/xiaozhi/modules/sys/controller/SysParamsController.java
@@ -284,5 +284,12 @@ public class SysParamsController {
         if (!secret.matches(".*[a-z].*") || !secret.matches(".*[A-Z].*")) {
             throw new RenException("您的mqtt密钥长度不安全，mqtt密钥必须同时包含大小写字母");
         }
+        // 不允许包含弱密码
+        String[] weakPasswords = { "test", "1234", "admin", "password", "qwerty", "xiaozhi" };
+        for (String weakPassword : weakPasswords) {
+            if (secret.toLowerCase().contains(weakPassword)) {
+                throw new RenException("您的mqtt密钥包含弱密码：" + weakPassword);
+            }
+        }
     }
 }