diff --git a/kernel/model/conf.go b/kernel/model/conf.go
index d80d043fc..b015f3411 100644
--- a/kernel/model/conf.go
+++ b/kernel/model/conf.go
@@ -494,6 +494,8 @@ func InitConf() {
 	if "" != util.AccessAuthCode {
 		Conf.AccessAuthCode = util.AccessAuthCode
 	}
+	Conf.AccessAuthCode = strings.TrimSpace(Conf.AccessAuthCode)
+	Conf.AccessAuthCode = util.RemoveInvalid(Conf.AccessAuthCode)
 
 	Conf.LocalIPs = util.GetLocalIPs()
 
diff --git a/kernel/util/working.go b/kernel/util/working.go
index 69add8b5c..fb412400d 100644
--- a/kernel/util/working.go
+++ b/kernel/util/working.go
@@ -95,6 +95,8 @@ func Boot() {
 	ServerPort = *port
 	ReadOnly, _ = strconv.ParseBool(*readOnly)
 	AccessAuthCode = *accessAuthCode
+	AccessAuthCode = strings.TrimSpace(AccessAuthCode)
+	AccessAuthCode = RemoveInvalid(AccessAuthCode)
 	Container = ContainerStd
 	if RunInContainer {
 		Container = ContainerDocker