diff --git a/pkg/api/account.go b/pkg/api/account.go
index 29e7a10..6b1956d 100644
--- a/pkg/api/account.go
+++ b/pkg/api/account.go
@@ -182,6 +182,9 @@ func LogoutEndpoint(c echo.Context) error {
 }
 
 func ConfirmTOTPEndpoint(c echo.Context) error {
+	if global.Config.Demo {
+		return Fail(c, 0, "演示模式禁止修改密码")
+	}
 	account, _ := GetCurrentAccount(c)
 
 	var confirmTOTP ConfirmTOTP
@@ -239,6 +242,9 @@ func ResetTOTPEndpoint(c echo.Context) error {
 }
 
 func ChangePasswordEndpoint(c echo.Context) error {
+	if global.Config.Demo {
+		return Fail(c, 0, "演示模式禁止修改密码")
+	}
 	account, _ := GetCurrentAccount(c)
 
 	var changePassword ChangePassword
diff --git a/pkg/config/config.go b/pkg/config/config.go
index 4b1bc47..ec37f6a 100644
--- a/pkg/config/config.go
+++ b/pkg/config/config.go
@@ -9,6 +9,7 @@ import (
 
 type Config struct {
 	Debug         bool
+	Demo          bool
 	DB            string
 	Server        *Server
 	Mysql         *Mysql
@@ -80,6 +81,7 @@ func SetupConfig() (*Config, error) {
 		},
 		ResetPassword: viper.GetString("reset-password"),
 		Debug:         viper.GetBool("debug"),
+		Demo:          viper.GetBool("demo"),
 	}
 
 	return config, nil