diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..7f6fc9d
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Wang Yuanyou
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
diff --git a/README.md b/README.md
index c9d108e..fcb9395 100644
--- a/README.md
+++ b/README.md
@@ -71,3 +71,7 @@ pnpm build
 - 事故复盘草稿
 
 模型调用、脱敏、审计、白名单知识库和密钥管理由后端代理实现。
+
+## 开源许可
+
+本仓库使用 MIT License。提交公开仓库前请确认 `.env`、部署密钥和真实第三方 token 未进入 Git 历史或提交内容。
diff --git a/package.json b/package.json
index ef9c538..1f6f586 100644
--- a/package.json
+++ b/package.json
@@ -2,6 +2,7 @@
   "name": "devops-platform-web",
   "private": true,
   "version": "0.0.0",
+  "license": "MIT",
   "type": "module",
   "scripts": {
     "dev": "vite",
diff --git a/src/services/devopsApi.ts b/src/services/devopsApi.ts
index 5d6a8d1..2590578 100644
--- a/src/services/devopsApi.ts
+++ b/src/services/devopsApi.ts
@@ -26,6 +26,7 @@ import type {
   JenkinsSyncSummary,
   LoginPayload,
   LoginResult,
+  MemberCredentialResult,
   MemberSummary,
   NotificationOutboxMessage,
   PipelineStep,
@@ -309,8 +310,10 @@ export const devopsApi = {
     return Array.isArray(data) ? data : []
   },
 
-  async createMember(payload: CreateMemberPayload): Promise<MemberSummary> {
-    const { data } = await http.post<MemberSummary>('/members', payload)
+  async createMember(
+    payload: CreateMemberPayload,
+  ): Promise<MemberCredentialResult> {
+    const { data } = await http.post<MemberCredentialResult>('/members', payload)
     lastDataSource = 'backend'
     return data
   },
@@ -327,8 +330,10 @@ export const devopsApi = {
     return data
   },
 
-  async resetMemberPassword(memberId: string): Promise<MemberSummary> {
-    const { data } = await http.post<MemberSummary>(
+  async resetMemberPassword(
+    memberId: string,
+  ): Promise<MemberCredentialResult> {
+    const { data } = await http.post<MemberCredentialResult>(
       `/members/${memberId}/reset-password`,
     )
     lastDataSource = 'backend'
diff --git a/src/types/devops.ts b/src/types/devops.ts
index 197b9b8..b54c381 100644
--- a/src/types/devops.ts
+++ b/src/types/devops.ts
@@ -100,6 +100,10 @@ export interface MemberSummary {
   projectPermissions: MemberProjectPermission[]
 }
 
+export interface MemberCredentialResult extends MemberSummary {
+  temporaryPassword: string
+}
+
 export interface ProjectPermissionPayload {
   projectKey: string
   level: ProjectPermissionLevel
diff --git a/src/views/LoginView.vue b/src/views/LoginView.vue
index 0edb8a1..9c3b785 100644
--- a/src/views/LoginView.vue
+++ b/src/views/LoginView.vue
@@ -36,7 +36,7 @@ const redirect = computed(() =>
 const roleHint = computed(() =>
   loginRole.value === 'super_admin'
     ? '超级管理员不提供忘记密码入口，请通过服务器运维方式重置。'
-    : '普通成员首次登录或重置密码后，必须先修改初始密码。',
+    : '普通成员首次登录或重置密码后，必须先修改临时密码。',
 )
 const isSuperAdminLogin = computed(() => loginRole.value === 'super_admin')
 
diff --git a/src/views/MembersView.vue b/src/views/MembersView.vue
index ae4af18..328e86c 100644
--- a/src/views/MembersView.vue
+++ b/src/views/MembersView.vue
@@ -21,6 +21,7 @@ import type {
   AuthRole,
   AuthStatus,
   CreateMemberPayload,
+  MemberCredentialResult,
   MemberSummary,
   PlatformMessageState,
   PlatformMessageSummary,
@@ -262,7 +263,7 @@ async function createMember() {
   const member = await devopsApi.createMember(payload)
   upsertMember(member)
   dialogVisible.value = false
-  ElMessage.success('成员已创建，初始密码为 111111')
+  await showTemporaryPassword(member, '成员已创建')
 }
 
 async function updatePermissions() {
@@ -282,7 +283,7 @@ async function updatePermissions() {
 
 async function resetPassword(member: MemberSummary) {
   await ElMessageBox.confirm(
-    `确认将 ${member.displayName} 的密码重置为 111111？`,
+    `确认为 ${member.displayName} 生成一次性临时密码？`,
     '重置密码',
     {
       confirmButtonText: '重置',
@@ -293,7 +294,21 @@ async function resetPassword(member: MemberSummary) {
   const updated = await devopsApi.resetMemberPassword(member.id)
   upsertMember(updated)
   await loadMessages()
-  ElMessage.success('密码已重置')
+  await showTemporaryPassword(updated, '临时密码已生成')
+}
+
+async function showTemporaryPassword(
+  member: MemberCredentialResult,
+  title: string,
+) {
+  await ElMessageBox.alert(
+    `请将以下临时密码安全发送给 ${member.displayName}，成员首次登录后必须修改密码。\n\n${member.temporaryPassword}`,
+    title,
+    {
+      confirmButtonText: '我已记录',
+      type: 'success',
+    },
+  )
 }
 
 async function toggleStatus(member: MemberSummary) {