diff --git a/packages/opencode/test/kilocode/cli/cmd/console.test.ts b/packages/opencode/test/kilocode/cli/cmd/console.test.ts
index a7934b9356a..40876c4a4ff 100644
--- a/packages/opencode/test/kilocode/cli/cmd/console.test.ts
+++ b/packages/opencode/test/kilocode/cli/cmd/console.test.ts
@@ -22,7 +22,7 @@ function state(input: Partial<Daemon.Network> = {}) {
     port: options.port,
     url: `http://${options.hostname}:${options.port}`,
     username: "kilo",
-    password: "kilo",
+    password: "secret",
     token: "token",
     version: "test",
     startedAt: new Date(0).toISOString(),
@@ -99,6 +99,10 @@ describe("console daemon startup", () => {
     expect(Daemon.matches(state(), opts({ port: 0 }), ["port"])).toBe(true)
   })
 
+  test("rejects legacy fixed-password daemon state", () => {
+    expect(Daemon.matches({ ...state(), password: "kilo" }, opts(), [])).toBe(false)
+  })
+
   test("supports daemon state written before network options were persisted", () => {
     const current = { ...state(), options: undefined }