From c8605ae8fbcb3c159c087fc6f0f0e19b095b1c13 Mon Sep 17 00:00:00 2001
From: Matthias <xmatthias@outlook.com>
Date: Sat, 9 May 2026 08:35:04 +0200
Subject: [PATCH] fix: require minimum 32 characters for JWT secrets

---
 freqtrade/config_schema/config_schema.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/freqtrade/config_schema/config_schema.py b/freqtrade/config_schema/config_schema.py
index 7fc885662..f00b4c1bd 100644
--- a/freqtrade/config_schema/config_schema.py
+++ b/freqtrade/config_schema/config_schema.py
@@ -757,6 +757,7 @@ CONF_SCHEMA = {
                     "description": "Secret key for JWT authentication.",
                     "type": "string",
                     "default": "somethingRandomSomethingRandom123",
+                    "minLength": 32,
                 },
                 "CORS_origins": {
                     "description": "List of allowed CORS origins.",