diff --git a/compose.instagram.yml b/compose.instagram.yml
index 18542ea..55e9efe 100644
--- a/compose.instagram.yml
+++ b/compose.instagram.yml
@@ -5,10 +5,15 @@ services:
   app:
     environment:
       - IG_USERNAME
-      - IG_PASSWORD
+      - IG_PASSWORD_FILE=/run/secrets/ig_password
       - IG_PROXY="socks://proxy:9050"
 
   proxy:
     image: palnabarun/tor
     networks:
       - internal
+
+secrets:
+  ig_password:
+    external: true
+    name: ${STACK_NAME}_ig_password_${SECRET_IG_PASSWORD_VERSION}
diff --git a/entrypoint.sh.tmpl b/entrypoint.sh.tmpl
index de69af8..28401f8 100644
--- a/entrypoint.sh.tmpl
+++ b/entrypoint.sh.tmpl
@@ -24,6 +24,10 @@ file_env() {
    unset "$fileVar"
 }
 
+{{ if eq (env "IG_ENABLED") "1" }}
+file_env "IG_PASSWORD"
+{{ end }}
+
 # upstream startup command
 # https://raw.githubusercontent.com/DIYgod/RSSHub/master/Dockerfile
 dumb-init --