diff --git a/src/config.js b/src/config.js
index 375842d..70fc34e 100644
--- a/src/config.js
+++ b/src/config.js
@@ -30,7 +30,7 @@ module.exports = {
     // },
 
     // enforce a password for creating new sessions. set to null to disable
-    password: null,
+    password: true,
 
     // disable or enable localStorage sync (turn off if clients send over huge localStorage data, resulting in huge memory usages)
     disableLocalStorageSync: false,