diff --git a/modules/api.js b/modules/api.js
index a7af04b..8a6c770 100644
--- a/modules/api.js
+++ b/modules/api.js
@@ -36,6 +36,7 @@ app.post('/api/login', async (req, res) => {
     let user = await User.fromName(req.body.username);
 
     if (!user) res.send({ error_code: 1001 });
+    else if (user.password == null || user.password === '') res.send({ error_code: 1003 });
     else if (user.password !== req.body.password) res.send({ error_code: 1002 });
     else {
       req.session.user_id = user.id;
diff --git a/views/login.ejs b/views/login.ejs
index 2c033b7..6e02cd9 100644
--- a/views/login.ejs
+++ b/views/login.ejs
@@ -73,6 +73,9 @@ function login() {
                 case 1002:
                     show_error("密码错误");
                     break;
+                case 1003:
+                    show_error("您尚未设置密码，请通过下方「找回密码」来设置您的密码。");
+                    break;
                 case 1:
                     success(data.session_id);
                     return;