diff --git a/apps/system/views.py b/apps/system/views.py
index 33e94c90..dfd9c8be 100755
--- a/apps/system/views.py
+++ b/apps/system/views.py
@@ -42,6 +42,7 @@ from cron_descriptor import get_description
 import locale
 from drf_yasg.utils import swagger_auto_schema
 from server.settings import get_sysconfig, update_sysconfig, update_dict
+from apps.utils.constants import DEFAULT_PWD
 
 # logger.info('请求成功！ response_code:{}；response_headers:{}；
 # response_body:{}'.format(response_code, response_headers, response_body[:251]))
@@ -462,7 +463,7 @@ class UserViewSet(CustomModelViewSet):
 
         创建用户
         """
-        password = make_password('abc!0000')
+        password = make_password(DEFAULT_PWD)
         serializer = self.get_serializer(data=request.data)
         serializer.is_valid(raise_exception=True)
         instance = serializer.save(password=password, belong_dept=None)
@@ -511,7 +512,7 @@ class UserViewSet(CustomModelViewSet):
     def reset_password(self, request, pk=None):
         user = self.get_object()
         if request.user.is_superuser:
-            user.set_password('abc!0000')
+            user.set_password(DEFAULT_PWD)
             user.save()
         else:
             raise PermissionDenied()
diff --git a/apps/utils/constants.py b/apps/utils/constants.py
index 110dc916..e4cf364c 100755
--- a/apps/utils/constants.py
+++ b/apps/utils/constants.py
@@ -1,8 +1,10 @@
 from django.db import models
 
 EXCLUDE_FIELDS_BASE = ['create_time', 'update_time', 'is_deleted']
-EXCLUDE_FIELDS = ['create_time', 'update_time', 'is_deleted', 'create_by', 'update_by']
+EXCLUDE_FIELDS = ['create_time', 'update_time',
+                  'is_deleted', 'create_by', 'update_by']
 EXCLUDE_FIELDS_DEPT = EXCLUDE_FIELDS + ['belong_dept']
+DEFAULT_PWD = 'abc!0000'
 
 
 class ObjCate(models.IntegerChoices):