diff --git a/start.sh b/start.sh
index 2a1f77f..7d4e850 100755
--- a/start.sh
+++ b/start.sh
@@ -5,7 +5,9 @@ set -eu
 if [[ -z "$(ls -A /app/data)" ]]; then
     echo "=> Detected first run"
     cp /app/code/searx/settings.yml.orig /app/data/settings.yml
-    sed -i -e 's/bind_address : "127.0.0.1"/bind_address : "0.0.0.0"/g' /app/data/settings.yml
+    sed -e 's/bind_address : "127.0.0.1"/bind_address : "0.0.0.0"/g' \
+        -e "s/ultrasecretkey/`openssl rand -hex 16`/g" \
+        -i /app/data/settings.yml
 fi
 
 chown -R www-data.www-data /app/data