diff --git a/middlewares/verifyAuth.js b/middlewares/verifyAuth.js
index 50ab33d..bccd43e 100644
--- a/middlewares/verifyAuth.js
+++ b/middlewares/verifyAuth.js
@@ -9,6 +9,7 @@ module.exports = options => {
       return res.send('auth fail')
     }
     if (authed) return next()
+    if (_CC.config.guestPassword && req.query.pw === _CC.config.guestPassword) return next()
     res.redirect(options.failureRedirect || config.defaultFailureRedirect)
   }
 }